CVE-2009-1468

Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 sql and 2 orderby elements in an XML search query...

CVE-2009-1469

CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header in the subject element o...

NoticeWare Email Server Version Detection

This script detects the installed NoticeWare Email Server and saves the version in KB. OpenVAS Vulnerability Test $Id: secpodnoticewaremailserverdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ NoticeWare Email Server Version Detection Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

NoticeWare Email Server Version Detection

This script detects the installed NoticeWare Email Server. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

NoticeWare Email Server NG PASS命令远程拒绝服务漏洞

BUGTRAQ ID: 31697 CVECAN ID: CVE-2008-6185 NoticeWare Email Server是用于Windows平台上的多线程电子邮件服务器，支持POP3和SMTP协议。 NoticeWare Email Server没有正确地处理多个POP3连接，远程攻击者可以通过发布登录请求的大量POP3连接导致邮件服务器崩溃。 NoticeWare Corporation NoticeWare E-mail Sever 5.1.2.2 厂商补丁： NoticeWare Corporation ----------------------...

Command injection

NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service crash via multiple POP3 requests with a long PASS command...

CVE-2008-6185

NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service crash via multiple POP3 requests with a long PASS command...

CVE-2008-6185

NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service crash via multiple POP3 requests with a long PASS command...

CVE-2008-6185

NoticeWare Email Server NG 5.1.2.2 is affected by CVE-2008-6185. The vulnerability allows remote attackers to trigger a denial of service (crash) by opening multiple POP3 connections and issuing long PASS commands. OpenVAS entries label this as a Denial of Service vulnerability for NoticeWare Mai...

Merak Mail Server邮件消息HTML注入漏洞

BUGTRAQ ID: 32969 Merak Email Server是一个全面的办公室局域网或Internet通讯邮件解决方案。 Merak Mail Server没有正确地过滤邮件消息中的IMG HTML标签便显示给了用于，如果攻击者发送了恶意邮件的话，当用户查看邮件时就会导致在浏览器会话中注入并执行任意HTML和脚本代码。 Icewarp Merak Mail Server 9.3.2 Icewarp ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.icewarp.com/...

LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)

LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow PoC Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS,...

LibSPF2 < 1.2.8 DNS TXT Record Parsing Bug Heap Overflow PoC

Exploit for multiple platform in category dos / poc ============================================================ LibSPF2 1.2.8 DNS TXT Record Parsing Bug Heap Overflow PoC ============================================================ Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan...

LibSPF2 &lt; 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)

Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and almost...

Noticeware E-mail Server 5.1.2.2 - POP3 Denial of Service

Noticeware E-mail Server 5.1.2.2 - POP3 Denial of Service !/usr/bin/python Software: NoticeWare E-mail Sever POP3 5.1.2.2 Pre-Auth DoS Discovered and Coded by: Paul Hand aka rAWjAW Blog: http://rawjaw-security.blogspot.com E-mail: phand3754gmailcom Description: NoticeWare E-mail Server has many o...

NoticeWare Email Server NG LOGIN Messages DoS Vulnerability

The host is running NoticeWare Email Server, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodnoticewareemailsvrdosvuln900027.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: NoticeWare Email Server NG LOGIN Messages DoS Vulnerability Authors: Chandan S...

NoticeWare Email Server NG LOGIN Messages DoS Vulnerability

NoticeWare Email Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Command injection

The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service daemon crash via multiple long LOGIN commands...

CVE-2008-3607

CVE-2008-3607 affects NoticeWare Email Server NG (IMAP server) 4.6.3 and earlier. The IMAP service can be forced into a denial-of-service (daemon crash) by sending multiple long LOGIN commands. OpenVAS entries corroborate a Denial of Service vulnerability in NoticeWare Email Server NG LOGIN messa...

CVE-2008-3607

The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service daemon crash via multiple long LOGIN commands...

NoticeWare Corporation NoticeWare Email Server NG LOGIN消息拒绝服务漏洞

BUGTRAQ ID: 30605 CNCAN ID：CNCAN-2008081103 NoticeWare Email Server NG是一款EMAIL服务程序。 NoticeWare Email Server NG处理LOGIN消息存在问题，远程攻击者可以利用漏洞对应用服务程序进行拒绝服务攻击。 通过发送40 LOGIN消息给IMAP服务器： A001 LOGIN Ax5000 AAAAA 根据重复消息的数量可能相关服务器资源可导致服务器崩溃，造成拒绝服务攻击。 NoticeWare Corporation Noticeware Email Server NG 4.6.3...