Extmail security vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability description: ExtMail Project is an active open source messaging system project is currently by ExtMail team maintenance. The item in 2 0 0 5 years 9 on 1 8 November the official launch, initially in the WebMail software is based, has been gradually formed ExtMail software series. Th...

CVE-2006-7111

Unspecified vulnerability in Futomi's CGI Cafe KMail CGI 1.0.3 and earlier allows remote attackers to bypass authentication and obtain unauthorized email access via unspecified vectors...

CVE-2006-7111

The CVE-2006-7111 issue affects Futomi’s CGI Cafe KMail CGI 1.0.3 and earlier. A vulnerability in the KMail CGI authentication flow allows a remote attacker to bypass user authentication, potentially viewing or deleting emails. The connected JVN entry confirms an authentication bypass, with no re...

Novell GroupWise Windows Client Arbitrary Email Access

The remote host is running GroupWise, an enterprise-class collaboration application from Novell. The version of GroupWise installed on the remote host contains a flaw in the client API that may allow a user to bypass security controls and gain access to non-authorized email within the same...

CVE-2006-3268

Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic access" to other email within the same post office...

Exim <= 4.41 dns_build_reverse Local Exploit

Exploit for linux platform in category local exploits ============================================ Exim = 4.41 dnsbuildreverse Local Exploit ============================================ / ripped straight off iDEFENSE advisory - so lazy I just picked up GDB... bored on a weeknight : nothing to wri...

Endymion MailMan Detection

Binary data 2742.prm...

bsd/x86 - cat /etc/master.passwd | mail email 92 bytes

bsd/x86 cat /etc/master.passwd | mail email 92 bytes. Shellcode exploit for bsdx86 platform / BSD version FreeBSD, OpenBSD, NetBSD. [email protected] 92 bytes. execve/bin/sh -c "/bin/cat /etc/master.passwd|mail root@localhost"; pueden reemplzar el comando por lo que se les ocurra. / char...

Outblaze Webmail - HTML Injection

Outblaze Webmail - HTML Injection source: https://www.securityfocus.com/bid/10756/info Outblaze Webmail is reported prone to an-HTML injection vulnerability because the application fails to properly sanitize user-supplied HTML email content. An attacker may be able to inject HTML and script code...

Outblaze Webmail - HTML Injection

source: https://www.securityfocus.com/bid/10756/info Outblaze Webmail is reported prone to an-HTML injection vulnerability because the application fails to properly sanitize user-supplied HTML email content. An attacker may be able to inject HTML and script code into the application through HTML...

Open WebMail Detection

The remote host is running Open WebMail, a webmail package written in Perl that provides access to mail accounts via POP3 or IMAP. %NASLMINLEVEL 70300 This script was written by George A. Theall, . See the Nessus Scripts License for details. include'deprecatednasllevel.inc'; include"compat.inc"; ...

Foxmail 5.0 - PunyLib.dll Remote Stack Overflow

Foxmail 5.0 - PunyLib.dll Remote Stack Overflow / fmx.c - x86/win32 Foxmail 5.0 PunyLib.dll remote stack buffer overflow exploit C COPYRIGHT XFOCUS Security Team, 2004 All Rights Reserved ----------------------------------------------------------------------- Author : xfocus : http://www.xfocus.o...

CVE-2003-0728

Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL...

CVE-2003-0728

Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL...

Netscape 4.x/6.x / Mozilla 0.9.x - Malformed Email POP3 Denial of Service

// source: https://www.securityfocus.com/bid/5002/info The Netscape Communicator and Mozilla browsers include support for email, and the ability to fetch mail through a POP3 server. Both products are available for a range of platforms, including Microsoft Windows and Linux. Under some...

emumail.cgi

name : emumail.cgi date : 04/04/2002 description : EMU Webmail: how to check your email from the web. severity : Low/average-risk homepage : www.emumail.com Any user can view files on the remote system: xxx/PATH/emumail.cgi?type=FILE00 The vendor were contact about that...

Novell Groupwise contains protocol implementation vulnerability allowing email to be viewed by unauthorized user

Overview Novell GroupWise is an email storage program. Email is encrypted when stored. Usernames and passwords can be acquired by sniffing communications between the client and server. Description In Novell GroupWise email is stored as encrypted data. Clients and servers operating in Live Remote ...

iemsdaipp.txt

[email protected] Georgi Guninski security advisory 40, 2001 Security bugs in interactions between IE 5.x, IIS 5.0 and Exchange 2000 Systems affected: The bug is in IE 5.x Win2K, probably others but interaction with IIS 5.0 or Exchange web storage is required Risk: High Date: 28 March 2001...

Security bugs in interactions between IE 5.x, IIS 5.0 and Exchange 2000

Georgi Guninski security advisory 40, 2001 Security bugs in interactions between IE 5.x, IIS 5.0 and Exchange 2000 Systems affected: The bug is in IE 5.x Win2K, probably others but interaction with IIS 5.0 or Exchange web storage is required Risk: High Date: 28 March 2001 Legal Notice: This...

CVE-2000-0318

CVE-2000-0318 affects Atrium Mercur Mail Server 3.2 via a local directory traversal vulnerability (dot-dot). The vulnerability allows a local attacker to read other users’ email and to create arbitrary files by exploiting a path traversal issue. The available documents do not provide explicit exp...