CVE-2000-0301

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...

CVE-2000-0301

CVE-2000-0301 affects Ipswitch IMAIL server 6.02 and earlier. The issue enables remote attackers to cause a denial of service by sending the AUTH CRAM-MD5 command, impacting availability. The record lists a network-exposed attack with no authentication and a partial availability impact (CVSS v2 b...

CVE-2000-0780

The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. dot dot attack...

CVE-2000-0056

CVE-2000-0056 affects the IMail server’s IMONITOR status.cgi CGI script. The vulnerability is described as allowing remote attackers to cause a denial of service by issuing many requests to status.cgi, impacting availability. The connected Nessus plugin expands the context to a potential buffer o...

CVE-2000-0056

IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi...

CVE-2000-0780

The CVE-2000-0780 entry concerns the IPSWITCH IMail web server (versions 6.04 and earlier) vulnerable to a directory-traversal (dot-dot) attack that allows remote attackers to read and delete arbitrary files. The vulnerability is described as affecting the web server component, with impact descri...

CVE-2000-0780: Undefined Security Weakness

The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. dot dot attack...

CVE-2000-0056: Undefined Security Weakness

IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi...

CVE-2000-0301: Undefined Security Weakness

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...

Vulnerability Report On IPSWITCH's IMail

Vulnerability Report On IPSWITCH's IMail Date Published: August 30 2000 Advisory ID: TS003 Bugtraq ID: http://www.securityfocus.com/bid/1617 CVE CAN: None at this time Title: IPSWITCH IMail File Attachment Vulnerability Class: Access Validation Error Remotely Exploitable: Yes Locally Exploitable:...

Очередная дырка в IMAIL

Используя Web-интерефейс можно прикрепить локальный файл с сервера к письму пользователя...

Ipswitch IMail 6.x - File Attachment

source: https://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383 for it's end users to access. Via th...

Ipswitch IMail 6.x - File Attachment

Ipswitch IMail 6.x - File Attachment source: https://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383...

IMail Host: Header Field Handling Remote Overflow

The remote web server crashes when it is issued a too long argument to the 'Host:' field of an HTTP request. An attacker may use this flaw to either completely prevent this host from serving web pages to the world, or to make it die by crashing several threads of the web server until the complete...

Imail Web Service Remote DoS Attack v.2

Imail Web Service Remote DoS Attack v.2 Release Date: August 17, 2000 Systems Affected: Ipswitch Imail 6.00 2-1 Description: The following is a simple DoS we found while working on Retina's CHAMCommon Hacking Attack Methods HTTP auditing module which should be released within the next two weeks...

Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm)

I'm the lead developer for Windows Eudora here at Qualcomm, and I've been the one who has investigated these issues of SMTP authentication with IPSwitch's IMail server. Here's some details that may be helpful for IMail users: The problem is with IMail SMTP server versions 6.02 and below. When the...

DoS против IMail

ВО время авторизации почтового клиента с использованием SMTP-AUTH блокируется библиотека авторизации и другие клиенты не могут быть авторизованы, при этом не используется таймаут. Ошибка в реализации протокола авторизации приводит к тому, что часть стандартных почтовых клиентов блокируют...

Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm)

Ipswitch blames BOTH NetScape AND Eudora for not following RFC's, but does nothing to control the situation. It is very simple to deny service to any IMAIL 5.xx or 6.xx server as follows. IMAIL allows SMTP AUTH using various methods, including CRAM-MD5 and LOGIN If a Eudora 4.3 client attaches to...

CVE-2000-0301

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...

CVE-1999-0231

This CVE affects IP-Switch IMail and Seattle Labs Slmail 2.6, caused by a buffer overflow triggered by a long VRFY command. Impact: denial of service and potentially remote access. Remediation: for Seattle Labs Slmail 2.6, disable VRFY until a patch is available; for IP-Switch IMail, no fix/versi...