456 matches found
CVE-2005-3454
Technical details are not publicly available in the provided documents for CVE-2005-3454. No specifics on affected products, impact, or remediation are supplied. Monitor for updates.
BusinessMail email server buffer overflow
Buffer overflow in multiple SMTP commands...
BusMail_SMTPDOS.pl.txt
Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...
[Full-disclosure] Buffer overflow in BusinessMail email server system 4.60.00
Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...
CVE-2004-2150
The CVE-2004-2150 entry concerns Nettica Corporation INTELLIPEER Email Server 1.01, which discloses account validity through differing error messages. Related sources (PT-2004-3045 and Nessus entries) describe remote authentication attempts revealing whether an account exists, enabling user enume...
CVE-2004-2150
Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote attackers to determine valid account names...
IA eMailServer IMAP4 LIST Command Format String Remote DoS
The remote host is running True North Software's IA eMailServer, a messaging system for Windows. The remote version of IA eMailServer suffers from a format string vulnerability leading to a denial of service that can be exploited by an authenticated user when sending a specially crafted IMAP LIST...
True North eMailServer < 5.3.4 Build 2019 LIST Command Remote DoS (deprecated)
Binary data 3036.prm...
Sun JavaMail 1.3 - API MimeMessage Infromation Disclosure
source: https://www.securityfocus.com/bid/13683/info The MimeMessage method in the Sun JavaMail API does not perform sufficient validation on message number values that are passed to the method during requests. An attacker that can successfully authenticate to an email server implementation that ...
CVE-2004-2150
Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote attackers to determine valid account names...
PT-2004-3045 · Nettica · Intellipeer Email Server
Name of the Vulnerable Software and Affected Versions: Nettica Corporation INTELLIPEER Email Server version 1.01 Description: The issue allows remote attackers to determine valid account names by exploiting different error messages displayed for valid and invalid account names. Recommendations: F...
slmail5x.txt
SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0942 INTRO: SLMail Pro is web-based POP3 and SMTP email server software for MicrosoftT Windows 2000 that includes advanced features usually found in enterprise-level systems. Seattlelab...
merak527.txt
CRIOLABS http://www.criolabs.net - Software: Merak Webmail Server - Type: Webmail - Company: Merak Mail Server, Inc. Software Software: Merak Webmail Server Version: 5.2.7 Plataforms: All Windows platforms Web: http://www.merakmailserver.com/ Vendor Description Merak's WebMail Server is used by...
PSCS VPOP3 2.0 - Email Server Remote Denial of Service
PSCS VPOP3 2.0 - Email Server Remote Denial of Service source: https://www.securityfocus.com/bid/10782/info It is reported that VPOP3 is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker issues a URI request containing a large value for the...
Rosiello Security's exploit for MDaemon
© Rosiello Security http://www.rosiello.org Bug found by hat-squad security. Background by securiteam.com MDaemon offers a full range of mail server functionality. MDaemon protects your users from spam and viruses, provides full security, includes seamless web access to your email via WorldClient...
Alt-N MDaemon 6.x/WorldClient - Form2Raw Raw Message Handler Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/9317/info It has been reported that MDaemon/WorldClient mail server may be prone to a buffer overflow vulnerability when handling certain messages with a 'From' field of over 249 bytes. This issue may allow a remote attacker to gain unauthorized access...
PSCS VPOP3 2.0 Email Server WebAdmin - Cross-Site Scripting
source: https://www.securityfocus.com/bid/8869/info It has been reported that PSCS VPOP3 Email Server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to embed malicious HTML and script code in a link. The issue is reported to be present in the WebAdmin utilit...
MDaemon 5.0.5 authentication vulnerability
Hello, There is a security problem on MDaemon 5.0.5 maybe other versions affected as well regarding smtp authentication. Blank password authenticates any valid user: For primary domain: User: VALIDUSER or [email protected] Password: blank password For secondary domains: User:...
Multiple Buffer Overflow Vulnerabilities in SLMail (#NISR07052003A)
NGSSoftware Insight Security Research Advisory Name: Multiple Buffer Overflows in SLMail Systems Affected: SLMail 5.1.0.4420 on Windows Severity: High Risk Vendor URL: http://www.slmail.com Authors: David Litchfield [email protected] Mark Litchfield [email protected] Date: 7th May 2003...
ISMAIL (All Versions) Remote Buffer Overrun
NGSSoftware Insight Security Research Advisory Name: ISMAIL v 1.25 & v 1.4.3 Remote Buffer Overrun Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Remote Buffer Overrun Vendor URL: http://instantservers.com/ismail.html Author: Mark Litchfield [email protected] Date: 27th...