CVE-2003-0280: Undefined Security Weakness

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

CVE-2003-0263: Undefined Security Weakness

Multiple buffer overflows in Floosietek FTGate Pro Mail Server FTGatePro 1.22 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow source: https://www.securityfocus.com/bid/7506/info A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Mail From'...

FTGate buffer overflow

Buffer overflow in SMTP MAIL FROM: command...

CVE-2001-1380: Undefined Security Weakness

OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the /.ssh/authorizedkeys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses...

CVE-2002-1459: Undefined Security Weakness

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...

ISMAIL buffer overflow

Buffer overflow in SMTP MAIL FROM: and RCPT TO:...

PT-2002-2656 · Pingtel · Pingtel Xpressa

Name of the Vulnerable Software and Affected Versions: Pingtel Xpressa versions 1.2.5 through 2.0.1 Description: The issue allows remote attackers to avoid registering with the SIP registrar by exploiting predictable values in a Session Identification Protocol SIP request, specifically the Call-I...

iSMTP buffer overflow

Buffer overflow on oversized MAIL FROM:...

Bug in Opera and Konqueror

/----------------+--------------------------------------+------------- | sp00fed packet | | advisory 2 | +----------------+--------------------------------------+-------------+ | Product: multiply vendors browsers | | Vulnerability: buffer overflow | | Danger: low |...

CVE-2002-0910: Undefined Security Weakness

Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities 1 linux-ftpd, 2 pcnfsd, 3 tftp, 4 traceroute, or 5 from/to...

CVE-2002-0751: Undefined Security Weakness

CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified 1 form-to, 2 form-from, and 3 form-results parameters...

memberlist.php of vBulletin

vBulletin ALL versions Vendor status: notified 3/18/2; no response Within the first few lines of code in memberlist.php, the variable $letterbits is evaled. Because of the way PHP initializes variables, we can inject HTML, or JavaScript into the document. So by directing a user to, for example:...

CVE-1999-1542

CVE-1999-1542 affects RPMMail prior to 1.4. An attacker can remotely run commands by sending an e‑mail containing shell metacharacters in the MAIL FROM command, indicating a remote code execution vulnerability caused by unsanitized input in the mail command path. The provided documents do not spe...

CVE-2001-0631: Undefined Security Weakness

Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...

CVE-1999-1542: Undefined Security Weakness

RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command...

OpenSSH 2.5.x - 2.9 Multiple Vulnerabilities

According to its banner, the remote host appears to be running OpenSSH version between 2.5.x and 2.9. Such versions reportedly contain multiple vulnerabilities : - sftp-server does not respect the 'command=' argument of keys in the authorizedkeys2 file. CVE-2001-0816 - sshd does not properly hand...

CVE-2001-0494

IPSwitch IMail SMTP Buffer Overflow (CVE-2001-0494) affects IMail Server 6.06 and earlier. The OpenVAS/Nessus/NVD entries describe a vulnerability in theIMail SMTP daemon where inadequate bounds checking on input passed to the Mailing List handler allows remote attackers to remotely execute arbit...

CVE-2001-0494: Undefined Security Weakness

Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header...

CVE-1999-1190: Undefined Security Weakness

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message...