Magic Winmail Server 4.0 (Build 1112) - 'upload.php' Traversal Arbitrary File Upload

source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads. There is also a HTML injection...

Magic Winmail Server 4.0 (Build 1112) - 'download.php' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads. There is also a HTML injection...

CVE-2004-1211

Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via long arguments to the 1 EXAMINE, 2 SUBSCRIBE, 3 STATUS, 4 APPEND, 5 CHECK, 6 CLOSE, 7 EXPUNGE, 8 FETCH, 9 RENAM...

CVE-2004-1211

Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via long arguments to the 1 EXAMINE, 2 SUBSCRIBE, 3 STATUS, 4 APPEND, 5 CHECK, 6 CLOSE, 7 EXPUNGE, 8 FETCH, 9 RENAM...

CVE-2004-1211

CVE-2004-1211 targets Mercury/32 4.01a IMAP service and describes multiple buffer overflows that allow remote authenticated users to crash the application and potentially execute arbitrary code via long arguments to various IMAP commands (EXAMINE, SUBSCRIBE, STATUS, APPEND, CHECK, CLOSE, EXPUNGE,...

MailEnable < 1.53 IMAP Service Multiple Remote Pre-Authentication Buffer Overflows

Binary data 2435.prm...

IMAP Service Cleartext Login Permitted

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. This script was...

Remote buffer overflow in MailEnable IMAP service [Hat-Squad Advisory]

Product: MailEnable Mail Server Vendor Url: http://www.mailenable.com Version: MailEnable Professional Edition v1.52, MailEnable Enterprise Edition v1.01 Vulnerability: Remote buffer overflow in IMAP service Release Date: 26 November, 2004 Vendor Status: InInformed on 24 November 2004 Response: 2...

MailEnable Mail Server IMAP <= 1.52 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== MailEnable Mail Server IMAP include include ifdef WIN32 include "winsock2.h" pragma commentlib, "ws232" else include include include include include include include include...

MDaemon IMAP Service CREATE Command Mailbox Name Handling Overflow

Binary data 1094.prm...

CVE-2003-1470

Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service crash and execute arbitrary code via a CREATE command with a long mailbox name...

MDaemon SMTP/POP/IMAP server =&gt;v.6.7.5: IMAP buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Damage Hacking Group security advisory www.dhgroup.org Product: MDaemon SMTP/POP/IMAP server =v.6.7.5 Authors: Alt-N Technologies www.mdaemon.com Vulnerability: remote buffer overflow in IMAP service Overview----------------------------------------------------- ...

imail.5.0.txt

Date: Mon, 1 Mar 1999 23:30:21 -0800 From: Marc To: [email protected] Subject: Multiple IMail Vulnerabilites eEye Digital Security Team www.eEye.com [email protected] March 1, 1999 Multiple IMail Vulnerabilites Systems Affected IMail 5.0 Release Date March 1, 1999 Advisory Code...

CVE-1999-0643

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...