[SA14604] Communigate Pro Unspecified Message Handling Denial of Service

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Communigate Pro Unspecified Message Handling Denial of...

Communigate Pro < 3.2 HTTP Configuration Port Remote Overflow

Binary data 1502.prm...

CommuniGate Pro < 4.0 .1b2 Referer Field Hijacking

Binary data 1552.prm...

CommuniGate Pro < 3.2 HTTP Configuration Port Remote Overflow (deprecated)

Binary data 2006.prm...

[Full-Disclosure] LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog

According to various sources on the net, the vulnerable LHa code has been used in other products. SecurityFocus says that WinZip and WinRar also are vulnerable to the LHa buffer overflows: http://www.securityfocus.com/bid/10243/info/ I have found a mailing list discussion about my LHa test archiv...

CVE-2003-1481

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer...

CommuniGate Pro Webmail 4.0.6 - Session Hijacking

CommuniGate Pro Webmail 4.0.6 - Session Hijacking !/usr/bin/perl Below is exploit code. Place it into cgi-bin, then recommended make symlink from DocumentRoot/AnyImage.gif to shj.pl, configure at least $url variable, and possible other vars and send victim HTML message with img src to your...

CommuniGate Pro Webmail 4.0.6 Session Hijacking Exploit

Exploit for linux platform in category remote exploits ======================================================= CommuniGate Pro Webmail 4.0.6 Session Hijacking Exploit ======================================================= !/usr/bin/perl Below is exploit code. Place it into cgi-bin, then...

CommuniGate Pro Webmail 4.0.6 - Session Hijacking

!/usr/bin/perl Below is exploit code. Place it into cgi-bin, then recommended make symlink from DocumentRoot/AnyImage.gif to shj.pl, configure at least $url variable, and possible other vars and send victim HTML message with img src to your AnyImage.gif. When victim will read message, script will...

CommuniGate Pro Referer Field Session Token Disclosure

The remote install of CommuniGate Pro, according to its version number, is vulnerable to a flaw that could allow a remote attacker to access the mailbox of a targeted user. To exploit such a flaw, an attacker needs to send an email to its victim with a link to an image hosted on a rogue server th...

Directory traversal bug in Communigate Pro 4&#39;s Webmail service

Directory traversal bug in Communigate Pro 4.0b to 4.0.2 -------------------------------------------------------- Overview -------- When experimenting a bit with Communigate Pro's webmail service I found a directory traversal bug by which attackers can read any file readable by the user Communiga...

Communigate Pro directory traversal

Web interface directory traversal...

CVE-2002-2375

Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a 1 .. dot dot or 2 . dot in a URL. NOTE: it is not clear whether this issue reveals any more information...

CommuniGate Pro directory listings

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Problem: An anonymous user can see the listing of the current and parent directory of CommuniGatePro WebUser directory. Vulnerable: All current versions of CommuniGatePro = 4.0b4 Details: You can get the listing of directory by accessing the...

CVE-2000-1002

The CVE-2000-1002 vulnerability affects the POP3 daemon in Stalker CommuniGate Pro 3.3.2 where authentication error handling reveals whether a username exists by returning different messages for invalid usernames versus invalid passwords. This information leakage enables remote attackers to enume...

CVE-2000-1002

POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks...

CVE-2000-1002

POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks...

CVE-2000-0634

The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0634

The CVE-2000-0634 entry concerns the web administration interface of CommuniGate Pro 3.2.5 and earlier, where an attacker can read arbitrary files via a directory traversal (.. path) vector. The underlying issue is a dot-dot traversal vulnerability in the web admin interface that permits reading ...

S21SEC-003: Vulnerabilities in CommuniGate Pro v3.2.4

ID: S21SEC-003-en Title: Vulnerabilities in Stalker's CommuniGate Pro v3.2.4 Date: 03/04/2000 Status: Vendor contacted Scope: Remote command execution as superuser Platforms: Linux, probably others Author: llmora, fjserna Location: http://www.s21sec.com/en/avisos/s21sec-003-en.txt Release: Public...