CVE-2009-1602

CVE-2009-1602 affects Quick 'n Easy Mail Server 3.3. It enables a remote denial-of-service through processing of multiple long SMTP commands (demonstrated via HELO). The reported impact is daemon outage or CPU consumption, with CVSS base metrics indicating a Network attack vector, low complexity,...

Quick 'n Easy Mail Server SMTP Request Remote Denial Of Service Vulnerability

Quick 'n Easy Mail Server is prone to a denial-of-service vulnerability because it fails to adequately handle multiple socket requests. Attackers can exploit this issue to cause the affected application to reject SMTP requests, denying service to legitimate users. The demonstration release of Qui...

Quick 'n Easy Mail Server 3.3 SMTP Request Remote DoS Vulnerability

Quick SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100185";...

Quick N Easay Mail Server 3.3 Denial Of Service

--------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ When you pass a long string to the server, it checks for...

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections source: https://www.securityfocus.com/bid/34820/info IceWarp Merak Mail Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

IceWarp Merak Mail Server 9.4.1 - Forgot Password Input Validation

IceWarp Merak Mail Server 9.4.1 - Forgot Password Input Validation source: https://www.securityfocus.com/bid/34827/info IceWarp Merak Mail Server is prone to an input-validation vulnerability because it uses client-supplied data when performing a 'Forgot Password' function. Attackers can exploit...

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections

source: https://www.securityfocus.com/bid/34820/info IceWarp Merak Mail Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

IceWarp Merak Mail Server 9.4.1 - item.php Cross-Site Scripting

IceWarp Merak Mail Server 9.4.1 - item.php Cross-Site Scripting source: https://www.securityfocus.com/bid/34825/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this iss...

IceWarp Merak Mail Server 9.4.1 - cleanHTML() Cross-Site Scripting

IceWarp Merak Mail Server 9.4.1 - cleanHTML Cross-Site Scripting source: https://www.securityfocus.com/bid/34823/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...

IceWarp Merak Mail Server 9.4.1 - 'item.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34825/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

IceWarp Merak Mail Server 9.4.1 - 'cleanHTML()' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34823/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Stack overflow

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

Quick 'n Easy Mail Server 3.3 (Demo) Remote Denial of Service PoC

No description provided by source. --------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ When you pass a long...

Quick n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)

Quick n Easy Mail Server 3.3 Demo - Remote Denial of Service PoC --------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

Quick 'n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)

--------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ When you pass a long string to the server, it checks for...

Axigen Mail Server HTML Injection Vulnerability

Axigen Mail Server is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Axigen Mail Server HTML Injection Vulnerability

Axigen Mail Server is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication...

CVE-2009-1484

Cross-site scripting XSS vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving e-mail messages. NOTE: the provenance of this information is unknown; the details are obtained sole...