CVE-2006-7040

CVE-2006-7040 concerns MERCUR Messaging (2005) prior to Service Pack 4. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a TOP command to the POP3 service. Affected product/version: MERCUR Messaging 2005 before SP4. Root cause details are not explicitly st...

CVE-2006-7039

The CVE-2006-7039 entry concerns MERCUR Messaging 2005 before Service Pack 4, specifically an IMAP4 service issue. A remote attacker can crash the service by sending a message with a long subject field, constituting a denial-of-service vulnerability. Exploitation details or patch specifics are no...

CVE-2006-7039

The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service crash via a message with a long subject field...

CVE-2006-7041

The CVE-2006-7041 entry concerns MERCUR Messaging 2005 before Service Pack 4, where the SMTP service is vulnerable to a denial-of-service (infinite loop) triggered by a message with neither originator nor recipient address known. Public sources (NVD/NIST) describe this as a remote DoS with CVSSv2...

CVE-2006-7038

CVE-2006-7038 refers to multiple buffer overflow flaws in MERCUR Messaging 2005 prior to Service Pack 4. The issues enable remote denial of service (crash) when an attacker sends (1) excessively long command lines to port 32000 and (2) certain SMTP-related name service queries not properly handle...

CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service crash via 1 "long command lines at port 32000" and 2 certain name service queries that are not properly handled by the SMTP service...

CVE-2006-7041

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service infinite loop via a message in which neither the originator nor recipient address is known...

CVE-2006-7041: Undefined Security Weakness

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service infinite loop via a message in which neither the originator nor recipient address is known...

CVE-2006-7040: Undefined Security Weakness

Unspecified vulnerability in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service crash via a TOP command to the POP3 service...

CVE-2006-7038: Undefined Security Weakness

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service crash via 1 "long command lines at port 32000" and 2 certain name service queries that are not properly handled by the SMTP service...

CVE-2007-1083: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Configuration Checker ConfigChk ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Messaging for Microsoft Exchange, and Go Secure! allows remote attackers to execute arbitrary code via long arguments to the VerCompare method...

Mercur Messaging 2005 multiple security vulnerabilities

Multiple DoS conditions and buffer overflows...

CVE-2007-1083

The CVE-2007-1083 issue affects the VeriSign Configuration Checker ActiveX control (VSCnfChk.dll, version 2.0.0.2) used in VeriSign PKI products. The Nessus entry confirms a stack/buffer overflow in VerCompare() that can allow remote code execution when a user is tricked into loading a crafted we...

CVE-2006-7039: Undefined Security Weakness

The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service crash via a message with a long subject field...

CVE-2007-0325

CVE-2007-0325 is a remote buffer overflow in Trend Micro OfficeScan’s Web-Deployment SetupINICtrl ActiveX control (OfficeScanSetupINI.dll, SetupINICtrl) used by OfficeScan Web deployment. The flaw affects OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client/Server/Messag...

Moderate: Red Hat Security Advisory: dbus security update

Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between applications. It is used both for the systemwide...

Mercur Messaging 2005 IMAP Remote Buffer Overflow Exploit

No description provided by source. !/bin/perl tested on win2k server SP4 English ATTENTION! If you have an another valid account you must change the offsets this is only a poc use IO::Socket::INET; my $host = shift@ARGV; my $port = 143; my $reply; my $request; my $user = "test"; my $pass = "test"...

Mercur Messaging 2005 IMAP Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= Mercur Messaging 2005 IMAP Remote Buffer Overflow Exploit ========================================================= !/bin/perl tested on win2k server SP4 English ATTENTION! If you ha...

Mercur Messaging 2005 - IMAP Remote Buffer Overflow

!/bin/perl tested on win2k server SP4 English ATTENTION! If you have an another valid account you must change the offsets this is only a poc use IO::Socket::INET; my $host = shift@ARGV; my $port = 143; my $reply; my $request; my $user = "test"; my $pass = "test"; my $nop = "\x90"x8; my $nop1 =...

Novell NetMail NMAP STOR Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Novell NetMail. Successful exploitation requires the attacker to successfully authenticate to the affected service. The specific flaw exists in NetMail's implementation of the Network Messaging...