495 matches found
CVE-2009-1469
CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header in the subject element o...
CVE-2009-1469: Improper Control of Generation of Code
CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header in the subject element o...
CVE-2009-1467: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in...
CVE-2009-1468: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 sql and 2 orderby elements in an XML search query...
NoticeWare Email Server Version Detection
This script detects the installed NoticeWare Email Server and saves the version in KB. OpenVAS Vulnerability Test $Id: secpodnoticewaremailserverdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ NoticeWare Email Server Version Detection Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...
NoticeWare Email Server Version Detection
This script detects the installed NoticeWare Email Server. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...
NoticeWare Email Server NG PASS命令远程拒绝服务漏洞
BUGTRAQ ID: 31697 CVECAN ID: CVE-2008-6185 NoticeWare Email Server是用于Windows平台上的多线程电子邮件服务器，支持POP3和SMTP协议。 NoticeWare Email Server没有正确地处理多个POP3连接，远程攻击者可以通过发布登录请求的大量POP3连接导致邮件服务器崩溃。 NoticeWare Corporation NoticeWare E-mail Sever 5.1.2.2 厂商补丁： NoticeWare Corporation ----------------------...
Command injection
NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service crash via multiple POP3 requests with a long PASS command...
CVE-2008-6185
NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service crash via multiple POP3 requests with a long PASS command...
CVE-2008-6185
NoticeWare Email Server NG 5.1.2.2 is affected by CVE-2008-6185. The vulnerability allows remote attackers to trigger a denial of service (crash) by opening multiple POP3 connections and issuing long PASS commands. OpenVAS entries label this as a Denial of Service vulnerability for NoticeWare Mai...
CVE-2008-6185
NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service crash via multiple POP3 requests with a long PASS command...
CVE-2008-6185: Improper Input Validation
NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service crash via multiple POP3 requests with a long PASS command...
Merak Mail Server邮件消息HTML注入漏洞
BUGTRAQ ID: 32969 Merak Email Server是一个全面的办公室局域网或Internet通讯邮件解决方案。 Merak Mail Server没有正确地过滤邮件消息中的IMG HTML标签便显示给了用于，如果攻击者发送了恶意邮件的话，当用户查看邮件时就会导致在浏览器会话中注入并执行任意HTML和脚本代码。 Icewarp Merak Mail Server 9.3.2 Icewarp ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.icewarp.com/...
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow PoC Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS,...
LibSPF2 < 1.2.8 DNS TXT Record Parsing Bug Heap Overflow PoC
Exploit for multiple platform in category dos / poc ============================================================ LibSPF2 1.2.8 DNS TXT Record Parsing Bug Heap Overflow PoC ============================================================ Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan...
LibSPF2 < 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and almost...
Noticeware E-mail Server 5.1.2.2 - POP3 Denial of Service
Noticeware E-mail Server 5.1.2.2 - POP3 Denial of Service !/usr/bin/python Software: NoticeWare E-mail Sever POP3 5.1.2.2 Pre-Auth DoS Discovered and Coded by: Paul Hand aka rAWjAW Blog: http://rawjaw-security.blogspot.com E-mail: phand3754gmailcom Description: NoticeWare E-mail Server has many o...
NoticeWare Email Server NG LOGIN Messages DoS Vulnerability
NoticeWare Email Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NoticeWare Email Server NG LOGIN Messages DoS Vulnerability
The host is running NoticeWare Email Server, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodnoticewareemailsvrdosvuln900027.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: NoticeWare Email Server NG LOGIN Messages DoS Vulnerability Authors: Chandan S...