CVE-2001-0996

POP3Lite before 0.2.4 is vulnerable due to improper quoting of a dot in an email message, allowing a remote attacker to append arbitrary text to the end of an email. This text could be interpreted by mail clients as valid POP server responses or other input, potentially causing clients to crash o...

Outlook Express and SPA (Secure Password Authentication)

Topic: Outlook Express and SPA Secure Password Authentication Author: 3APA3A Affected Software: Internet Explorer 5.5, 6.0 Vendor: Microsoft Status: Informational 1. Background: Outlook Express doesn't support CRAM-MD5 or APOP and there is only one way to authenticate user on POP3/IMAP/SMTP serve...

CVE-1999-1228

CVE-1999-1228 concerns various modems that do not implement a guard time or use a 0 guard time, enabling remote attackers to execute commands (e.g., ATH, ATH0) via a "+++" sequence embedded in ICMP packets, email subject lines, IRC, and more. Connected sources provide concrete details: exploitati...

POP3Lite 0.2.3b minor client side DoS and message injection

vulnerable POP3Lite = 0.2.3b not vulnerable POP3Lite = 0.2.4 abstract POP3Lite is a modular POP3 daemon developed to be fast, flexible and easy to use. It runs on Linux and BSD. POP3Lite fails to escape dots in messages it transfers to clients. Clients popping their mail from a vulnerable POP3Lit...

Qualcomm Eudora 5.1 - Hidden Attachment Execution

source: https://www.securityfocus.com/bid/2796/info Eudora is an email program for the Windows platform. Eudora contains a vulnerability which may make it possible for an attacker to excecute arbitrary code on a remote system even if 'allow executables in HTML content' is disabled, if the 'Use...

Переполнение буфера в Becky! (buffer overflow)

Переполнение буфера при длинной строке в теле письма...

CVE-2000-0716

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...

CVE-2000-1138

Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected...

CVE-2000-0909

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header...

CVE-2000-1138

CVE-2000-1138 affects Lotus Notes R5 client (R5.0.5 and earlier). The issue is that the client does not properly warn users when an S/MIME email message has been modified, allowing an attacker to modify the email in transit without detection. The available documents clearly identify the affected ...

CVE-2000-0931

Pegasus Mail

Проблема в Lotus Notes R5

При получении письма с некорректной сигнатурой пользователь не получает предупреждение...

DoS против Exchange

Пустой разделитель между MIME-частями Content-Type: boundary в письме приводит к отказу сервера Exchange...

Ipswitch IMail 6.x - File Attachment

source: https://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383 for it's end users to access. Via th...

Ошибка между imapd И mail.local

Hello, Надеюсь, что хотя бы из чувства патриотизма может быть еще кто-нибудь в дальнейшем решится писать в этот список рассылки до или хотя бы одновременно публикации в Bugtraq : Ошибка несерьезная, но достаточно интересная. Дело в том, что в данном случае ни одна из программ не содержит явной...

[Security] Mailman exploitability

re.Match object; span=1731, 2749, match=!--X-Head-of-Message--\nul\nliemTo/em:...

CVE-2000-0397

CVE-2000-0397 affects the EMURL web-based email account software. The vulnerability arises because session URLs encode predictable identifiers, enabling a remote attacker to access a user’s email account. The available documents do not specify affected product versions, root cause beyond predicta...

Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies

Hi people, Issue: Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies. I first found this sometime in 1996 can't remember exact date- long time ago : , and notified the relevant firewall vendor. After about 4 generations it's still not fixed i...

Qualcomm Eudora 4.24.3 - Warning Message Circumvention

Qualcomm Eudora 4.24.3 - Warning Message Circumvention source: https://www.securityfocus.com/bid/1157/info A malicious email sender can circumvent warning messages that would normally display when a user attempts to view executable attachments in Eudora 4.2/4.3. Eudora does not prompt a user with...

CVE-2000-0033

CVE-2000-0033 affects InterScan VirusWall SMTP scanner; vulnerability arises from improper handling of messages with malformed attachments. CVSS v2 base score 5.0 (MEDIUM) with no confidentiality/availability impact and partial integrity impact. No remediation details are provided in the documents.