CVE-2008-2631

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-2631

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted HTTP POST request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-2631

The CVE-2008-2631 issue affects Alt-N Technologies MDaemon WorldClient/WordClient interface. A memory corruption vulnerability arises from a NULL pointer dereference when processing a malicious HTTP POST request, allowing a remote unauthenticated attacker to crash the WorldClient service and caus...

MDaemon WorldClient远程拒绝服务及栈溢出漏洞

Alt-N MDaemon是一款基于Windows的邮件服务程序，WorldClient是其客户端。 WordClient客户端（默认监听于TCP 3000端口）在处理对其发送的HTTP请求时存在空指针引用错误，如果远程攻击者向WorldClient.dll发送了特制的HTTP POST请求的话，就可能导致客户端崩溃。 WordClient接口在处理带有超长Subject字段的Reply请求时存在栈溢出漏洞，如果远程攻击者从WordClient接口发送了特制邮件的话就可以触发这个溢出，导致执行任意代码。成功利用这个漏洞要求在服务器上拥有有效的邮件帐号。 Alt-N MDaemon =...

MDaemon 6.5.1 IMAP/SMTP Remote Buffer Overflow Exploit

No description provided by source. ///////////////////////////////////////////////////////////// // Remote proof-of-concept exploit // // for // // Mdaemon IMAP server v6.5.1 // // and // // possible other version. // // Find bug: DBuG. // // Author: DBuG. // // [email protected] // // Data: 16/09/2004 ...

MDaemon <= 9.6.5 Multiple Remote Buffer Overflow Exploit PoC

No description provided by source. MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site: http://altn.com Risk : Highly Critical hehe funny bugs here .. the worldclient use the port 3000 for a webmail like it use also an admin webmail located at port 1000 by default both are opened this...

MDaemon <= 9.6.5 Multiple Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ============================================================ MDaemon = 9.6.5 Multiple Remote Buffer Overflow Exploit PoC ============================================================ MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site:...

Alt-N MDaemon 9.6.5 - Multiple Remote Buffer Overflows (PoC)

Alt-N MDaemon 9.6.5 - Multiple Remote Buffer Overflows PoC MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site: http://altn.com Risk : Highly Critical hehe funny bugs here .. the worldclient use the port 3000 for a webmail like it use also an admin webmail located at port 1000 by defaul...

Alt-N MDaemon 9.6.5 - Multiple Remote Buffer Overflows (PoC)

MDaemon == v9.6.5 Multiple Remote Buffer Overflow Vendor Site: http://altn.com Risk : Highly Critical hehe funny bugs here .. the worldclient use the port 3000 for a webmail like it use also an admin webmail located at port 1000 by default both are opened this file unfortunatly contain multiple...

MDaemon 9.6.4 IMAPD FETCH Buffer Overflow

This module exploits a stack buffer overflow in the Alt-N MDaemon IMAP Server version 9.6.4 by sending an overly long FETCH BODY command. Valid IMAP account credentials are required. Credit to Matteo Memelli This module requires Metasploit: https://metasploit.com/download Current source:...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

Preemptive Protection against Alt-N MDaemon IMAP Server FETCH Command Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in the Alt-N MDaemon IMAP Server. The MDaemon IMAP server is a server side implementation of the IMAP protocol. Internet Message Access Protocol IMAP is a standard protocol for accessing e-mail from a local server that provides management of...

MDaemon IMAP Server FETCH Command Remote Buffer Overflow

According to its banner, the version of MDaemon installed on the remote host contains a stack-based buffer overflow in its IMAP server component that can be triggered via a FETCH command with a long BODY data item. An authenticated, remote attacker may be able to leverage this issue to crash the...

Alt-N MDaemon IMAP服务器FETCH命令远程栈溢出漏洞

BUGTRAQ ID: 28245 MDaemon是一款基于Windows的邮件服务程序。 MDaemon的IMAP服务器在处理FETCH命令的参数数据时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者向该服务发送的FETCH命令中的BODY数据项包含有超长的分段标识的话，就可以触发这个溢出，导致执行任意代码。但成功攻击要求拥有有效的用户凭据。 Alt-N MDaemon 9.64 Alt-N ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.altn.com...

Stack overflow

Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY...

CVE-2008-1358

Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY...

CVE-2008-1358

The CVE-2008-1358 entry concerns Alt-N MDaemon IMAP Server (Windows) 9.6.4, which is affected by a stack-based buffer overflow in the IMAP FETCH BODY handling. A remote authenticated user can exploit this by sending an overly long FETCH BODY command, with potential arbitrary code execution within...