Lam3rZ Security Advisory #3/2004: A bug in Confirm leads to remote command execution

Lam3rZ Security Advisory 3/2004 23 Feb 2004 Remote command execution in Confirm Name: Confirm =0.62 Severity: High Software URL: http://freshmeat.net/projects/confirm/ Software author: David Lechnyr davidrl/at/comcast/dot/net Advisory author: Mariusz Woloszyn emsi/AT/GTS/dot/PL Vendor notified: F...

CVE-2004-0324

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", , |, ;, or $...

CVE-2002-1575

cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline %0a characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message...

CVE-2003-1302

The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a 1 To or 2 From header with an address that contains a large number of "" backslash characters...

mail buffer overflow

Buffer overflow on parsing Cc: header in message...

Amavis 0.1.6 - Header Parsing Mail Relaying

source: https://www.securityfocus.com/bid/7306/info It has been reported that some versions of Amavis-ng do not properly interact with Postfix. Because of this, an attacker may be able to circumvent relay restrictions. telnet somemx.domain.tld 25 220 somemx.example.com ESMTP Postfix helo amavis-n...

DEBIAN-CVE-2002-1765

Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service memory consumption and crash via an email with a malformed MIME header...

CVE-2002-1255

Microsoft Outlook 2002 allows remote attackers to cause a denial of service repeated failure via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."...

DEBIAN-CVE-2002-1307

Cross-site scripting vulnerability XSS in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name...

Remote pine Denial of Service

Security Advisory 23rd October 2002 Remote pine version 4.44 denial of service Name: Pine version 4.44 Arch: Redhat 7.2 i386 Severity: Medium Vendor URL: http://www.washington.edu/pine/ Author: Linus Sjberg [email protected] Vendor notified: 14:th October 2002 Vendor response: 14:th October 2002...

CVE-2002-0950

Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e-mail header, which is not properly filtered...

Trend Micro Interscan VirusWall for Windows NT 3.52 - Space Gap Scan Bypass

Trend Micro Interscan VirusWall for Windows NT 3.52 - Space Gap Scan Bypass source: https://www.securityfocus.com/bid/5259/info A vulnerability has been reported in certain VirusWall versions. Reportedly, it is possible to bypass the scanning mechanism of VirusWall by adding extraneous spaces in...

CVE-2002-0637

InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having or missing space characters in unexpected places aka "space gap", such as 1 Content-Type :", 2 "Content-Transfer-Encoding :", 3 no spac...

CVE-2000-0570

FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header...

CVE-2001-0819

A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header...

CVE-1999-1190

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message...

CVE-2000-0567

Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability...

UoW Pine 4.0.4/4.10/4.21 - 'From:' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1709/info A buffer overflow vulnerability exists in the popular mail client Pine 4.21 and possibly earlier versions, relating to the function which regularly checks for incoming email. In standard e-mail message headers is a field that holds the name a...

Buffer Overflow in MS Outlook Email Clients

Security Advisory: Buffer Overflow in MS Outlook & Outlook Express Email Clients Date: 18th July 2000 Author: Aaron Drew mailto:[email protected] Versions Affected: MS Outlook 97/2000 and MS Outlook Express 4/5 A bug in a shared component of Microsoft Outlook and Outlook Express mai...

CVE-2000-0567

Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability...