5041 matches found
Quiksoft EasyMail 6.0.3.0 IMAP connect() Stack Overflow
!-- I - TITLE Security advisory: Quiksoft EasyMail 6.0.3.0 imap connect ActiveX stack overflow exploit II - SUMMARY Description: Remotely exploitable buffer overflow in ActiveX component Quiksoft EasyMail 6.0.3.0 allows for the arbitrary code execution in the user context. Author: Sebastian...
Quiksoft EasyMail 6.0.3.0 - IMAP 'connect()' ActiveX Buffer Overflow
!-- I - TITLE Security advisory: Quiksoft EasyMail 6.0.3.0 imap connect ActiveX stack overflow exploit II - SUMMARY Description: Remotely exploitable buffer overflow in ActiveX component Quiksoft EasyMail 6.0.3.0 allows for the arbitrary code execution in the user context. Author: Sebastian...
Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX BOF Exploit
Exploit for windows platform in category remote exploits ============================================================ Quiksoft EasyMail 6.0.3.0 imap connect ActiveX BOF Exploit ============================================================ !-- I - TITLE Security advisory: Quiksoft EasyMail 6.0.3.0...
Quiksoft EasyMail 6.0.3.0 - IMAP connect() ActiveX Buffer Overflow
Quiksoft EasyMail 6.0.3.0 - IMAP connect ActiveX Buffer Overflow !-- I - TITLE Security advisory: Quiksoft EasyMail 6.0.3.0 imap connect ActiveX stack overflow exploit II - SUMMARY Description: Remotely exploitable buffer overflow in ActiveX component Quiksoft EasyMail 6.0.3.0 allows for the...
[SECURITY] Fedora 10 Update: nginx-0.7.62-1.fc10
Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...
[SECURITY] Fedora 11 Update: nginx-0.7.62-1.fc11
Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...
[SECURITY] Fedora 10 Update: dovecot-1.1.18-2.fc10
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plugins are in their subpackages...
[SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1884-1 [email protected] http://www.debian.org/security/ Nico Golde September 14th, 2009 http://www.debian.org/security/faq -...
SurgeMail < 3.9g2 Buffer Overflow Vulnerability
SurgeMail is prone to a buffer overflow vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...
SurgeMail Detection Consolidation
Consolidation of SurgeMail detections. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute i...
IPSwitch IMAP Server 9.20 Overflow
/ Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" include include include include include "winsock2.h" prag...
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow / Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" includ...
IPSwitch IMAP Server 9.20 - Remote Buffer Overflow
/ Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h" include include include include include "winsock2.h" prag...
IPSwitch IMAP Server <= 9.20 Remote Buffer Overflow Exploit
No description provided by source. / Ipsbitch.cpp vs Ipswitch IMAP Tested on: Windows 2000 SP4 Ref: CVE-2007-2795 Author: Dominic Chell [email protected] Found this half written on a VM so decided to finish it. Payload adds a local admin account USER=r00t PASS=r00tr00t!! / include "stdafx.h"...
DSA-1884-1 nginx - arbitrary code execution
Bulletin has no description...
IPSwitch IMAP Server <= 9.20 Remote Buffer Overflow Exploit
Exploit for windows platform in category remote exploits =========================================================== IPSwitch IMAP Server include include include include "winsock2.h" pragma commentlib, "ws232" define usage voidfprintfstderr, "Ipsbitch vs Ipswitch IMAP \n\nExample: ipsbitch.exe ip...
Cyrus IMAP Server SIEVE脚本栈溢出漏洞
BUGTRAQ ID: 36296 Cyrus IMAP Server是一款免费开放源代码IMAP协议实现，可使用在Unix和Linux操作系统下。 cyrus-imapd的SIEVE组件在处理SIEVE脚本时没有正确地使用sizeof运算符。攻击者可以向snprintf调用传送负数的长度，由于整数转换这会生成很大的正数值，触发栈溢出。成功利用这个漏洞的攻击者可以将其权限提升到cyrus系统用户，因此能够向服务器安装SIEVE 脚本的用户可以读取和修改系统上的任意邮件消息。 cyrus IMAPd 2.2.13 厂商补丁： cyrus -----...
[SECURITY] Fedora 10 Update: cyrus-imapd-2.3.14-2.fc10
The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...
[SECURITY] Fedora 11 Update: cyrus-imapd-2.3.14-2.fc11
The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...
DEBIAN-CVE-2009-2632
Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...