CVE-2000-0909

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header...

CVE-2000-1138

CVE-2000-1138 affects Lotus Notes R5 client (R5.0.5 and earlier). The issue is that the client does not properly warn users when an S/MIME email message has been modified, allowing an attacker to modify the email in transit without detection. The available documents clearly identify the affected ...

CVE-2000-0931

Pegasus Mail

Проблема в Lotus Notes R5

При получении письма с некорректной сигнатурой пользователь не получает предупреждение...

DoS против Exchange

Пустой разделитель между MIME-частями Content-Type: boundary в письме приводит к отказу сервера Exchange...

Ipswitch IMail 6.x - File Attachment

source: https://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383 for it's end users to access. Via th...

Ошибка между imapd И mail.local

Hello, Надеюсь, что хотя бы из чувства патриотизма может быть еще кто-нибудь в дальнейшем решится писать в этот список рассылки до или хотя бы одновременно публикации в Bugtraq : Ошибка несерьезная, но достаточно интересная. Дело в том, что в данном случае ни одна из программ не содержит явной...

[Security] Mailman exploitability

re.Match object; span=1731, 2749, match=!--X-Head-of-Message--\nul\nliemTo/em:...

CVE-2000-0397

CVE-2000-0397 affects the EMURL web-based email account software. The vulnerability arises because session URLs encode predictable identifiers, enabling a remote attacker to access a user’s email account. The available documents do not specify affected product versions, root cause beyond predicta...

Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies

Hi people, Issue: Out of order SMTP DATA commands incorrectly allow pass-through mode in some firewall smtp filters/proxies. I first found this sometime in 1996 can't remember exact date- long time ago : , and notified the relevant firewall vendor. After about 4 generations it's still not fixed i...

Qualcomm Eudora 4.24.3 - Warning Message Circumvention

Qualcomm Eudora 4.24.3 - Warning Message Circumvention source: https://www.securityfocus.com/bid/1157/info A malicious email sender can circumvent warning messages that would normally display when a user attempts to view executable attachments in Eudora 4.2/4.3. Eudora does not prompt a user with...

CVE-2000-0033

CVE-2000-0033 affects InterScan VirusWall SMTP scanner; vulnerability arises from improper handling of messages with malformed attachments. CVSS v2 base score 5.0 (MEDIUM) with no confidentiality/availability impact and partial integrity impact. No remediation details are provided in the documents.

Back Door in Commercial Shopping Cart

Trojanized Commercial Shopping Cart =============================================================== Dansie Shopping Cart Version : 3.04 presumably earlier versions as well Author : Craig Dansie URL : http://www.dansie.net/ Language : Perl both NT and Unix platforms are vulnerable License :...

CVE-2000-0196

The CVE-2000-0196 entry concerns the Linux nmh package’s mhshow utility. A vulnerability in mhshow’s handling of MIME headers can cause a buffer overflow, enabling remote command execution by an attacker via a crafted email message. The description explicitly states that this allows remote attack...

EUVD-2000-0215

Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list...

CVE-2000-0058

CVE-2000-0058 affects HotSync Manager (Handsᴘʀᴛ Visor ecosystem). The OpenVAS NASL entry describes a Denial of Service: sending garbage to TCP port 14238 can crash HotSync Manager. CVSS 2.0 base score 5.0 (Network, low complexity, no authentication). The NVD/CVE records cite an authentication iss...

CVE-1999-0850

CVE-1999-0850 affects Endymion MailMan. The vulnerability arises from default permissions that let local users read email or modify files, implying local access and partial confidentiality/integrity impact. The provided documents do not specify a patch, workaround, affected versions, or exploit d...

ms.outlook.spoof.txt

Date: Tue, 20 Apr 1999 15:10:05 -0700 From: Nate Lawson To: [email protected] Subject: Outlook 98 allows spoofing internal users Problem: Outlook uses a sender's Reply-To address silently, allowing a user to inadvertently send data to an Internet mail account when intending to reply to an...

ms.exchange.outlook.javascript.txt

Date: Fri, 5 Mar 1999 11:30:56 -0000 From: Mat Newman To: "'[email protected]'" Subject: Exchange server web access You may have heard about this but... If someone is accessing Exchange server via the web then you can embed javascript into the email to get it to delete the contents of...

CVE-1999-1448

Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as 1 dates before 1970, which cause a Divide By Zero error, or 2 dates that are 100 years after the current date, which causes a segmentation...