1st Class Mail Server 4.0 1 viewmail.tagz XSS

No description provided by source. source: http://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reporte...

ArGoSoft 1.8.x Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7608/info A vulnerability has been reported for ArGoSoft Mail Server FreeWare version. The problem occurs due to the FreeWare version of ArGoSoft failing to carry out sufficient authentication before granting access to th...

Avirt Gateway Suite 3.3 a/3.5 Mail Server Buffer Overflow (1)

No description provided by source. source: http://www.securityfocus.com/bid/755/info The Avirt Mail Server 3.3a and 3.5 packages are vulnerable to a remote buffer overflow vulnerability. The buffer overflow can be initiated by passing 856 characters in the password field...

Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3,Mail Server 5.0.1/5.0.2/5.0.3 - Buffer Overflow

No description provided by source. Lotus Domino Enterprise Server 5.0.1/5.0.2/5.0.3,Mail Server 5.0.1/5.0.2/5.0.3 Buffer Overflow source: http://www.securityfocus.com/bid/1229/info The code that handles the 'rcpt to' 'saml from' and 'soml from' commands in the ESMTP service of Lotus Domino Server...

AA SMTP Server 1.1 - Crash PoC

No description provided by source. ========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 sonicdefenceatgmail.com...

Sky Communications Skyfull 1.1.4 Mail Server MAIL FROM Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/759/info The Skyfull mail server version 1.1.4 has an unchecked buffer into which the argument from the MAIL FROM command is placed. This buffer can be overwritten and arbitrary code can be executed...

Merak Mail Server 7.4.5 HTML Message Body XSS

漏洞描述： Merak Webmail Server 5.2.7版本中存在多个跨站脚本XSS漏洞。远程攻击者可以通过category， cserver， ext， global，showgroups， address.html中的showlite参数，或者spage 或者 settings.html中的autoresponder参数，readmail.html中的folder参数，或者 attachment.html中的attachmentpagetexterror参数 folder， ct， 或者 calendar.html中的 cv 参数， 标签，...

Concatus IMate Web Mail Server 2.5 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1286/info Sending an email to a Concatus IMate Web Mail Server 2.5 with a server name consisting of over 1119 characters will cause the application to crash. Restarting the program is required in order to regain normal...

Alt-N MDaemon 2.8.5 0 UIDL DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1366/info A remote user is capable of crashing Alt-N MDaemon 2.8.5.0 by executing the pass command, then the UIDL command and quitting the mail server before the UIDL has returned a response. This must be done before the...

SPECTral Personal SMTP Server <= 0.4.2 - Denial of Service Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; Small config If service not DoSeD try to increase this value. Number of trys for DoS. $trys = 10; Quantity signs for atack. $buf = 200000; if @ARGV 1 print \n /\n; print DoS - SPECTral Personal SMTP Server = 0.4.2 b 338 \n; print...

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)

No description provided by source. source: http://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP mail from command, the POP3 user command and the IMAP login command. T...

Floosietek FTGate Mail Server 1.2 index.fts folder Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/10058/info It has been reported that FTGate is prone to multiple remote input validation vulnerabilities; a cross-site scripting issue and an HTML injection vulnerability. These issues are due to a failure of the...

Brian Dorricott MAILTO 1.0.7-9 Unauthorized Mail Server Use Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3669/info MAILTO is a program maintained by Brian Dorricott. It enables web servers to allow forms to be converted into mail messages that can be sent to numerous recipients. An issue exists in MAILTO which could allow an...

IceWarp Universal WebMail /mail/include.html - Crafted HTTP_USER_AGENT Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites. An attacker can explo...

IceWarp Merak Mail Server 9.4.1 'item.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34825/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

IceWarp Mail Server 9.1.1 'admin/index.html' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27189/info IceWarp Mail Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...

1st Class Mail Server 4.0 1 general.tagz XSS

No description provided by source. source: http://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reporte...

1st Class Mail Server 4.0 1 members.tagz XSS

No description provided by source. source: http://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reporte...

Hosting Controller <= 6.1 HotFix 2.2 Add Domain without Quota Exploit

No description provided by source. !-- Change url /str0ke -- form method=post name=addform action=http://url/admin/iis/IISActions.asp?ActionType=AddSite&hostcustid=1&hostingplans=1 table tr class=looplistingDark td width=19% class=ContentsWebsite Name : /td td width=73% class=contents input...

TABS MailCarrier 2.51 - SMTP EHLO Overflow

No description provided by source. $Id: mailcarriersmtpehlo.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...