CVE-2005-2931

Ipswitch Collaboration Suite / IMail Server 8.20 (ICS) is affected by a format-string vulnerability in the SMTP server that allows remote attackers to execute arbitrary code via crafted input to the EXPN, MAIL, MAIL FROM, or RCPT TO commands. The issue stems from improper handling of format speci...

CVE-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

EUVD-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

CVE-2005-2923

The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to cause a denial of service crash via a long argument to the LIST command, which causes IMail Server to reference invalid memory...

CVE-2005-2923

CVE-2005-2923 affects Ipswitch’s IMail Server IMAP service (IP: Ipswitch Collaboration Suite). The vulnerability lies in the IMAP LIST command handling: when a long LIST argument (~8000 bytes) is processed, the server can reference invalid memory, leading to a crash (DoS). This requires authentic...

CVE-2005-2931: Undefined Security Weakness

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

CVE-2005-2923: Improper Input Validation

The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to cause a denial of service crash via a long argument to the LIST command, which causes IMail Server to reference invalid memory...

DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities

A directory traversal vulnerability was found in DeskNow webmail file attachment upload feature that may be exploited to upload files to arbitrary locations on the server. A second directory traversal vulnerability exists in the document repository file delete feature. SPDX-FileCopyrightText: 200...

CVE-2005-3454

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by Oracle Vuln 1 OCS01, 2 OCS02, 3 OCS03, and 4 OCS04 for Calendar; 5 OCS05, 6 OCS06, 7 OCS07, 8 OCS08, 9 OCS09, and 10...

CVE-2005-3454

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by Oracle Vuln 1 OCS01, 2 OCS02, 3 OCS03, and 4 OCS04 for Calendar; 5 OCS05, 6 OCS06, 7 OCS07, 8 OCS08, 9 OCS09, and 10...

CVE-2005-3454

Technical details are not publicly available in the provided documents for CVE-2005-3454. No specifics on affected products, impact, or remediation are supplied. Monitor for updates.

CVE-2005-3454: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by Oracle Vuln 1 OCS01, 2 OCS02, 3 OCS03, and 4 OCS04 for Calendar; 5 OCS05, 6 OCS06, 7 OCS07, 8 OCS08, 9 OCS09, and 10...

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

CVE-2005-1987

CVE-2005-1987 is a remote code execution vulnerability in Microsoft Collaboration Data Objects (CDO) used by CDOSYS/CDOEX on Windows and Exchange. An unchecked buffer triggered by processing a malformed SMTP/email header (e.g., oversized Content-Type) can allow an attacker to execute arbitrary co...

CVE-2005-1987: Buffer Copy without Checking Size of Input

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

Microsoft Windows Microsoft Collaboration Data Objects buffer overflow

Buffer overflow on parsing mail messages with Microsoft SMTP service...

Microsoft Security Bulletin MS05-048 Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245)

Microsoft Security Bulletin MS05-048 Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution 907245 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows or Microsoft Exchange Server Impact of...

Microsoft Collaboration Data Objects buffer overflow

Overview A buffer overflow in Microsoft Collaboration Data Objects may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Collaboration Data Objects CDO is a scripting library used to develop applications that handle email. Note that C...

MS05-048: Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245)

An unchecked buffer condition could allow an attacker to execute arbitrary code on the remote host. To execute this flaw, an attacker would need to send a malformed message via SMTP to the remote host, either by using the SMTP server if Exchange is installed or by sending an email to a user on th...