Multiple MailEnable mail server vulnerabilities

Buffer overflow and IMAP folders directory traversal, DoS...

WorldMail IMAP Server Traversal Arbitrary Mail Spool Access

The remote host is running Eudora WorldMail, a commercial mail server for Windows. The IMAP server bundled with the version of WorldMail installed on the remote host fails to filter directory traversal sequences from mailbox names and fails to restrict access to mailboxes within its spool area. A...

WorldMail IMAP Server Directory Traversal Arbitrary Spool Access

Binary data 3299.prm...

FTGate mail server buffer overflow

IMAP server oversized EXAMINE command buffer overflow...

FTGate4 IMAP EXAMINE Command Remote Overflow

The remote host appears to be running a version of FTGate, a commercial groupware mail server for Windows from FTGate Technology Ltd. The version of FTGate installed on the remote host includes an IMAP server that is prone to a buffer overflow attack due to boundary errors in its handling of...

Buffer Overrun in FTGate4 Groupware Mail server

/ Package: FTGate4 Groupware Mail server Auth: http://www.floosietek.com/ Versions: 4.1 / previous versions may also be vulnerable Vulnerability Type: Remote Code Execution / Disclaimer: --------- The information is provided "as is" without warranty of any kind. The author of this issue shall not...

CVE-2005-3640

Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate FTGate4 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command...

CVE-2005-3640

FTGate4 IMAP server (FTGate4, version 4.1) is affected by a remote buffer overflow in the IMAP handling logic (boundary errors in various IMAP commands, demonstrated with EXAMINE). The underlying cause is improper handling of long command arguments, enabling a remote attacker to potentially execu...

CVE-2005-3640

Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate FTGate4 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command...

FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow (PoC)

FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow PoC !/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host,...

FTGate4 Groupware Mail Server 4.1 (imapd) Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "143", ; unless $remote...

Cyrus IMAP pre-login buffer overrun

According to its banner, the remote Cyrus IMAP server is vulnerable to a pre-login buffer overrun. An attacker without a valid login could exploit this, and would be able to execute arbitrary commands as the owner of the Cyrus process. This would allow full access to all users' mailboxes. More...

MDaemon imap server DoS

The remote host is running the MDaemon IMAP server. It is possible to crash the remote version of this softare sending a long argument to the 'LOGIN' command. This problem allows an attacker to make the remote service crash, thus preventing legitimate users from receiving e-mails. OpenVAS...

BasiliX Arbitrary File Disclosure Vulnerability

The remote web server contains a PHP script that is prone to information disclosure. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions allow retrieval of arbitrary files that are accessible to the web server user when sending a message since they...

IMAP Unencrypted Cleartext Logins

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. OpenVAS...

MailEnable IMAP Service Search DoS Vulnerability

The target is running at least one instance of MailEnable's IMAP service. A flaw exists in MailEnable Professional Edition versions 1.5a-d that results in this service crashing if it receives a SEARCH command. An authenticated user could send this command either on purpose as a denial of service...

BasiliX Detection

The remote web server contains a webmail application written in PHP. Description : This script detects whether the remote host is running BasiliX and extracts version numbers and locations of any instances found. BasiliX is a webmail application based on PHP and IMAP and powered by MySQL. OpenVAS...

MDaemon imap server DoS(2)

The remote host is running the MDaemon IMAP server. It is possible to crash the remote version of this software by by sending a too long argument to the 'SELECT' or 'EXAMINE' commands. This problem allows an attacker to make the remote service crash, thus preventing legitimate users from receivin...

IMAP Banner

Displays the imap4 service banner. OpenVAS Vulnerability Test $Id: imap4banner.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: IMAP Banner Authors: Vincent Renardias Copyright: Copyright C 2003 StrongHoldNet This program is free software; you can redistribute it and/or modify it under the...

IMAP arbitrary file retrieval

The target is running an IMAP daemon that allows an authenticated user to retrieve and manipulate files that would be available to that user via a shell. If IMAP users are denied shell access, you may consider this a vulnerability. OpenVAS Vulnerability Test $Id: imaparbitraryfileretrieval.nasl...