MERCUR imapd SUBSCRIBE command buffer overflow

Added: 03/27/2007 CVE: CVE-2007-1579 BID: 23050 OSVDB: 33546 Background MERCUR Messaging Server is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability allows remote, authenticated attackers to execute arbitrary commands by...

Novell NetMail WebAdmin Username Stack Buffer Overflow (CVE-2007-1350)

Novell NetMail is an electronic mail server product that supports various email access and exchange protocols, including IMAP Internet Message Access Protocol and NMAP Network Messaging Application Protocol.WebAdmin is a browser based administrative tool used to manage NetMail...

Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit

No description provided by source. / axiagen.c Axigen eMail Server v2.0 beta by fuGich Tue Dec 5 2006 thanks to mu-b - Tested on: Axigen V2 beta logType for the pop3 service must be "system" and the logLevel set to any number with 4th bit set remote shell format string vulnerability in pop3...

Axigen eMail Server 2.0.0b2 - pop3 Remote Format String

Axigen eMail Server 2.0.0b2 - pop3 Remote Format String / axiagen.c Axigen eMail Server v2.0 beta by fuGich Tue Dec 5 2006 thanks to mu-b - Tested on: Axigen V2 beta logType for the pop3 service must be "system" and the logLevel set to any number with 4th bit set remote shell format string...

Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit

Exploit for linux platform in category remote exploits =============================================================== Axigen eMail Server 2.0.0b2 pop3 Remote Format String Exploit =============================================================== / axiagen.c Axigen eMail Server v2.0 beta by fuGich...

Axigen eMail Server 2.0.0b2 - 'pop3' Remote Format String

/ axiagen.c Axigen eMail Server v2.0 beta by fuGich Tue Dec 5 2006 thanks to mu-b - Tested on: Axigen V2 beta logType for the pop3 service must be "system" and the logLevel set to any number with 4th bit set remote shell format string vulnerability in pop3 /bin/sh to bind to port 31337 optimised...

Preemptive Protection against MailEnable POP3 Remote Code Execution Vulnerability

A buffer overflow vulnerability exists in MailEnable service. MailEnable is an email server suite for Microsoft Windows. Several mail servers contain buffer overflow errors in the way they handle commands. By carefully crafting an overly long POP3 'PASS' command, an attacker can trigger a buffer...

Barracuda Networks Spam Firewall存在多个漏洞

Barracuda Networks Spam Firewall是一款用于保护邮件服务器的集成硬件和软件垃圾邮件解决方案。 Barracuda Networks Spam Firewall存在多个安全问题，远程攻击者可以利用漏洞获得密码和文件信息。 Barracuda Networks Spam Firewall 3.3.01.001到3.3.02.053版本存在内置"guest"帐户密码"bnadmin99"，利用这个帐户可登录WEB接口。...

Preemptive Protection against MailEnable IMAP Service Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in MailEnable IMAP service. MailEnable is an email server suite for Microsoft Windows. Several IMAP servers contain buffer overflow errors in the way they handle IMAP commands. By carefully crafting an overly long SELECT/EXAMINE command, an attacker can...

Microsoft Exchange Server OWA脚本注入漏洞（MS06-029）

Microsoft Exchange Server是一款流行的邮件服务器。 Exchange Server在处理邮件中的脚本存在漏洞，导致脚本代码在用户机器上非授权执行。 运行Outlook Web Access OWA的Exchange Server在某些情况下没有正确的过滤邮件中的 脚本，导致脚本注入漏洞。攻击者可以通过创建有特制脚本的邮件消息来利用这个漏洞。如果运行了特制脚本的话，就会在客户端以用户的安全环境执行。利用这个漏洞需要用户交互。 Microsoft Exchange Server 2003 SP2 Microsoft Exchange Server 2003 SP1...

CVE-2006-3108

EmailArchitect Email Server 6.1 is affected by an XSS vulnerability. An attacker can inject arbitrary JavaScript by exploiting a malformed HTML div tag where a carriage return sits between the onmouseover attribute and its value, bypassing the mail filter. This is described in multiple sources (N...

CVE-2006-2974

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errCode and 2 uid parameter in a default.asp and 3 dname parameter in b /admin/dns.asp and c /additional/regdomaindone.asp...

CVE-2006-2974

The CVE-2006-2974 entry concerns EmailArchitect Email Server (versions up to 6.1.0.5). The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via parameters: (1) errCode and (2) uid in default.asp, and (3) dna...

MS06-019: Vulnerability in Microsoft Exchange Could Allow Remote Code Execution (916803)

The remote host is running a version of Exchange that is vulnerable to a bug in the vCal or iCal attachment handling routine that could allow an attacker execute arbitrary code on the remote host by sending a specially crafted email. Tenable Network Security, Inc. include"compat.inc"; if...

Buffer overflow

Multiple unspecified vulnerabilities in the Email Server component in Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1 have unknown impact and attack vectors, aka Vuln 1 OCS01, 2 OCS02, 3 OCS03, and 4 OCS04...

CVE-2006-1879

Multiple unspecified vulnerabilities in the Email Server component in Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1 have unknown impact and attack vectors, aka Vuln 1 OCS01, 2 OCS02, 3 OCS03, and 4 OCS04...

CVE-2006-1879

Multiple unspecified vulnerabilities in the Email Server component in Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1 have unknown impact and attack vectors, aka Vuln 1 OCS01, 2 OCS02, 3 OCS03, and 4 OCS04...

CVE-2006-1879

Technical details (root cause, impact, affected components/versions, exploit vectors) are not publicly available in the provided documents. Monitor for updates for more concrete information about CVE-2006-1879.

Oracle Collaboration Suite Email Server contains a vulnerability that may compromise system confidentiality

Overview An unspecified vulnerability in the Oracle Collaboration Suite Email Server may allow a remote, unauthenticated attacker to compromise system confidentiality. Description Oracle Collaboration Suite Email Server contains an unspecified vulnerability. Oracle states this issue can allow an...

Oracle Collaboration Suite Email Server vulnerability

Overview An unspecified vulnerability in the Oracle Collaboration Suite Email Server may allow a remote, unauthenticated attacker to compromise system integrity, confidentiality, and availability. Description Oracle Collaboration Suite Email Server contains a vulnerability.The details of this...