CVE-2000-0971: Undefined Security Weakness

Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command...

CVE-2000-0909: Undefined Security Weakness

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header...

CVE-2000-0910: Undefined Security Weakness

Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address...

CVE-2000-0985: Undefined Security Weakness

Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command...

CVE-2000-0907: Undefined Security Weakness

EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands...

Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service

Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service // source: https://www.securityfocus.com/bid/1825/info Due to insufficient bounds checking in the code that handles the fields 'MAIL FROM:' and 'RCPT TO:', it is possible to remotely crash Avirt Mail. Entering over 272 characters into the...

CVE-1999-0873

The issue CVE-1999-0873 affects the Skyfull mail server and is caused by a buffer overflow triggered via the MAIL FROM command. Public sources (NVD) describe a network-exploitable vulnerability with a low attack complexity and no required authentication, with partial impacts on confidentiality, i...

CVE-1999-0873: Undefined Security Weakness

Buffer overflow in Skyfull mail server via MAIL FROM command...

Дырка в библиотеке horde

При обработке поля From: не проверяется наличие метасимволов, что позволяет вставить шелл-команды в письмо...

Horde library Bug part 2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Horde Library $from Bug part 2 + How to exploit with IMP and Sendmail Description: The Fix of the first detected problem with the $from variable in the horde library was just escaping shellchars which avoids directly executing commands. It is still...

horde library bug - unchecked from-address

Hi, this bug we discovered recently. HORDE 1.2.0 $from-bug and how to exploit with IMP 2.2.0 Disclaimer: This is intended as a paper for sysadmins who want to secure their systems. It is NOT a how to for scriptkiddies to run any attack on a IMP-using site. The authors of this text will not be hel...

Ошибка между WU-imap И mail.local

При доставке письма в Unix mailbox mail.local считает, что разделителем между письмами является пустая строка со следующим за ней заголовком "From ". Если в письме встречается такое сочетание, то "From" комментируется знаком ''. К сожалению, imapd считает разделителем строку "From " в определенно...

CVE-2000-0452: Undefined Security Weakness

Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command...

CVE-2000-0442: Undefined Security Weakness

Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command...

CVE-2000-0343

Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header...

CVE-2000-0343: Undefined Security Weakness

Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header...

CVE-2000-0343

Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header...

CVE-2000-0112

The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...

CVE-1999-0203

In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that would cause the mail to bounce to a program...

CVE-2000-0112: Undefined Security Weakness

The default installation of Debian GNU/Linux uses an insecure Master Boot Record MBR which allows a local user to boot from a floppy disk during the installation...