823 matches found
NOCC 0.9.x - Webmail Script Injection
source: https://www.securityfocus.com/bid/4740/info NOCC is a web based email client implemented in PHP4. It includes support for POP3, SMTP and IMAP servers, MIME attachments and multiple languages. A script injection issue has been reported with the way emails are displayed to users of NOCC...
Rit Research Labs The Bat! 1.53 - Microsoft Denial of Service Device Name Denial of Service
source: https://www.securityfocus.com/bid/4187/info The Bat! is an e-mail client for Microsoft Windows operating systems. A problem occurs with The Bat! when it is configured to save attachments seperately from the body of a message. It is possible to include a MS-DOS device name such as CON, AUX...
Buffer Overflow in Microsoft Internet Explorer
Internet Security Systems Alert February 25, 2002 Buffer Overflow in Microsoft Internet Explorer Synopsis: ISS X-Force has learned of a buffer overflow vulnerability in Microsoft Internet Explorer versions 5.5 and 6.0. This vulnerability may be exploited by delivering specially-crafted HTML code ...
Claris Emailer buffer over flow vulnerabirity
If already published, already fix it, too much old infomation, please send trash box :- At least 2.0v2 is not fixed if Apple does't tell a lie. --------------------------------------------------------------------- Claris Emailer buffer over flow vulnerabirity Problem first discoverd:2000.7.26...
CVE-1999-1354
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files 1 home.fc for version 5.506, 2 network.fc for version 3.5, or 3 FCCLIENT.LOG when logging is enabled...
CVE-1999-1366
Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail...
~..~!guano
Wednesday, 28 March, 2001 The BAT! .. is a feisty multi-tasking email client that is rapidly gaining popularity and for good reason. Cursory examination of it reveals solid effective security measures on all fronts, including non-browser dependent html viewing with on/off switch, random named fil...
CVE-2000-0716
CVE-2000-0716 affects WorldClient email client in MDaemon 2.8. The session ID is included in the referer header of an HTTP request when the user clicks a URL, allowing the visited site to hijack the session ID and read the user’s email. Exploitation details are not provided in the documents, and ...
The Bat! version 1.49
We would like to inform you that version 1.49 is now released. It contains some important security fixes so we recommend you to download it as soon as you can if you use The Bat! as your primary e-mail client. What's new in The Bat! 1.49? Legend: since 1.48 + Added feature Improved/changed featur...
Дырка в pine
Редактируемое сообщение помещается во временный файл с предсказуемым именем без проверки разрешений и символьных линков...
Kenny Carruthers Postmaster 1.0 Buffer Overflow Vulnerability
Description Postmaster is a GUI based email client for the BeOS platform. In the event that Postmaster receives an email containing a URL consisting of over 512 bytes, the application will crash when attempting to create a link within the body of the message. Postmaster will continue to crash upo...
Переполнение буфера в pine
Классическое переполнение буфера в процедуре периодической проверки почты при длинном заголовке From: письма...
Linux News 29.08.00
Linux Kernel pre-patch 2.4.0 test8-pre1 Первый пререлиз восьмого тестового ядра Linux - Linux Kernel 2.4.0. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Kernel Traffic 82 Очередной Kernel Traffic за номером 82. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-08-29-010-06-OS-KN...
Microsoft Outlook 97982000 Outlook Express 4.05.0 - GMT Field Buffer Overflow (1)
Microsoft Outlook 97982000 Outlook Express 4.05.0 - GMT Field Buffer Overflow 1 source: https://www.securityfocus.com/bid/1481/info All versions of Microsoft Outlook and Outlook Express are vulnerable to buffer overflow attacks where a remote user is capable of executing arbitrary code on an emai...
mdaemon 2.8.5.0 DoS
mdaemon 2.8.5.0 remote DoS Win95 vulnerable Tested on a K5-166 with 32MB RAM Win98SE vulnerable Tested on a K7-500 with 128MB RAM A single user wasnґt able to receive eMail - after the password was send, the mail client just haltet, and did nothing till the timeout. I tried to find the error, by...
Qualcomm Eudora 4.2/4.3 - Warning Message Circumvention
source: https://www.securityfocus.com/bid/1157/info A malicious email sender can circumvent warning messages that would normally display when a user attempts to view executable attachments in Eudora 4.2/4.3. Eudora does not prompt a user with the warning message if they are attempting to open a...
getpop3.txt
what?: =-getpop3 exploit-= who?: - by r3p3nt of the DHC - where?: - http://dhc1.cjb.net - contact?: - [email protected] greets: all of DHC, duke, f0rpaxe, artech, and eli up for some raceball? thanks: jwb [email protected] You are wondering "hmm..what is getpop3, mister r3p3nt". Well,...
CVE-2000-0082
Technical details (affected product/version, root cause, and fixes) are not publicly provided in the supplied documents; monitor for updates.
