Code-Crafters Ability Mail Server IMAP FETCH请求远程拒绝服务漏洞

Bugraq ID: 36519 Code-Crafters Ability Mail Server是一款Email服务程序。 Code-Crafters Ability Mail Server处理IMAP版本4 FETCH存在未明错误，远程攻击者可以利用漏洞使服务程序崩溃。 目前没有详细漏洞细节提供。 Code-Crafters Ability Mail Server 2.63 用户可联系供应商升级到Code-Crafters Ability Mail Server 2.70版本：...

Mandriva Update for bind MDKSA-2007:030 (bind)

Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDKSA-2007:030 bind Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

YACS CMS 8.11 Remote File Inclusion

-----------------remote file include----------------- script: YACS version 8.11 ------------------------------------------------------------------ download from: http://www.yetanothercommunitysystem.com/file-fetch/814-20081130-yacs-8.11rc30.zip ============================================== vul:...

DEBIAN-CVE-2008-4907

The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service persistent crash via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsi...

xoops-exec.txt

== xoops-1.3.10 shell command execute vulnerability causing snoopy class == Author: geinblues geinblues at gmail dot com DATE: 9.7.2008 Site: http://enterblue.net/x90c/ Risk: Midium == 0 Vulnerability Tracing Tracing BREAK 0 BREAK 6 /xoops-1.3.10/html/class/snoopy.class.php...

FreeBSD Security Advisory (FreeBSD-SA-04:16.fetch.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:16.fetch.asc ADV FreeBSD-SA-04:16.fetch.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

FreeBSD Security Advisory (FreeBSD-SA-04:16.fetch.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:16.fetch.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2008-1358

Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY...

MailEnable Pro/Ent <= 3.13 (Fetch) post-auth Remote BOF Exploit

No description provided by source. !/usr/bin/perl ================================================================= MailEnable Professional = 3.13 "FETCH" post-auth buffer overflow ================================================================= Bind Shell POC Exploit for Win2K SP4 pro English...

MailEnable ProfessionalEnterprise 3.13 - Fetch (Authenticated) Remote Buffer Overflow

MailEnable ProfessionalEnterprise 3.13 - Fetch Authenticated Remote Buffer Overflow !/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use...

DEBIAN-CVE-2007-5007

Stack-based buffer overflow in the irfetchseq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command...

DEBIAN-CVE-2007-5934

The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2...

CVE-2007-5007

Stack-based buffer overflow in the irfetchseq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command...

CVE-2007-5007

Stack-based buffer overflow in the irfetchseq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command...

SLAD Run

This script connects to SLAD on a remote host to run remote scanners. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS Vulnerability Test Fetch...

SLAD Fetch Results

This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

Design/Logic Flaw

Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."...

CVE-2007-3628

Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers to "manipulate the generated sorting queries."...

CVE-2007-3628

CVE-2007-3628 affects PEAR Structures-DataGrid-DataSource-MDB2 up to version 0.1.9, specifically the fetch function in MDB2.php. The vulnerability allows attackers to manipulate generated sorting queries. The connected documents confirm the affected component and the general impact, but do not pr...

SUSE-SA:2007:014: bind

The remote host is missing the patch for the advisory SUSE-SA:2007:014 bind. Two security problems were fixed in the ISC BIND nameserver version 9.3.4, which are addressed by this advisory: CVE-2007-0493: If recursion is enabled, a remote attacker can dereference a freed fetch context causing the...