Privilege escalation: User is able to add a page to his watchlist without having the permission

Szenario: create user1 and user2 user1 has access to space1 user2 has access to space2 user1 can add a page to his watchlist by manipulating using a proxy like webscarab the postrequest to http://localhost:8080/dwr/exec/PageNotification.startWatching.dwr and replacing the id contained in paramete...

CVE-2008-4041

The IMAP server in Softalk Mail Server formerly WorkgroupMail 8.5.1.431 allows remote authenticated users to cause a denial of service resource consumption and daemon crash via a long IMAP APPEND command with certain repeated parameters...

CVE-2008-4041

CVE-2008-4041 affects the Softalk Mail Server (formerly WorkgroupMail) IMAP server, version 8.5.1.431. The issue enables remote authenticated users to cause a denial of service by issuing a long IMAP APPEND command with certain repeated parameters, leading to resource consumption and daemon crash...

CVE-2008-4041

The IMAP server in Softalk Mail Server formerly WorkgroupMail 8.5.1.431 allows remote authenticated users to cause a denial of service resource consumption and daemon crash via a long IMAP APPEND command with certain repeated parameters...

Softalk Mail Server 'APPEND'命令远程拒绝服务漏洞

BUGTRAQ ID: 30970 CNCAN ID：CNCAN-2008090309 Softalk Mail Server是一款邮件服务程序。 Softalk Mail Server IMAP服务不正确处理APPEND命令，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 提交特殊构建的APPEND命令给IMAP服务处理，可导致应用程序崩溃。 Softalk Mail Server 8.5.1 目前没有解决方案提供： http://www.softalkltd.com/ A001 LOGIN user password A01 APPEND Ax5000 UIDNEXT...

Softalk Mail Server IMAP Denial of Service Vulnerability

Softalk Mail Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Softalk Mail Server 8.5.1 - APPEND Remote Denial of Service

Softalk Mail Server 8.5.1 - APPEND Remote Denial of Service source: https://www.securityfocus.com/bid/30970/info Softalk Mail Server is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit...

Postfix mail server hardlinks privilege escalation

It's possible to cause Postfix to deliver mail to system file by using hardlinks to symlink available against standard in Linux, IRIX, Solaris...

[AJECT] Softalk IMAP Server 8.5.1 DoS vulnerability

---------------------------------------- Synopsis ---------------------------------------- Softalk IMAP Server 8.5.1 is vulnerable to denial-of-service DoS attacks. The IMAP server crashes when processing an APPEND command with a strange parameter see details bellow. Other commands may also trigg...

Softalk Mail Server 8.5.1 - 'APPEND' Remote Denial of Service

source: https://www.securityfocus.com/bid/30970/info Softalk Mail Server is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to crash the affected application, denying servic...

CMailServer CMailCOM.dll MoveToFolder buffer overflow

Added: 08/27/2008 BID: 30098 OSVDB: 46750 Background CMailServer is a mail and web mail server. The CMailServer web interface includes the CMailCOM.dll component which provides several classes. Problem A buffer overflow vulnerability in the MoveToFolder method of the POP3 class in CMailCOM.dll...

hMailServer IMAP Denial of Service Vulnerability

This host is running hMailServer, which is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodhmailserverimapdosvuln900109.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: hMailServer IMAP Denial of Service Vulnerability Authors: Sharath S Copyright: Copyright C 2008...

hMailServer IMAP Denial of Service Vulnerability

hMailServer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WinGate Mail Server DoS

IMAP LIST command resources exhaustion...

[SECURITY] Fedora 8 Update: clamav-0.92.1-3.fc8

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] Fedora 9 Update: clamav-0.93.1-1.fc9

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

CVE-2008-2049

The POP3 server EPSTPOP3S.EXE 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information via multiple crafted APOP commands for a known POP3 account, which displays the password in a POP3 error message...

Design/Logic Flaw

The POP3 server EPSTPOP3S.EXE 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information via multiple crafted APOP commands for a known POP3 account, which displays the password in a POP3 error message...

CVE-2008-2049

The POP3 server EPSTPOP3S.EXE 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information via multiple crafted APOP commands for a known POP3 account, which displays the password in a POP3 error message...

CVE-2008-2049

The CVE-2008-2049 entry affects E-Post Mail Server 4.10, specifically the POP3 server EPSTPOP3S.EXE v4.22. The vulnerability arises from handling of crafted APOP commands for a known POP3 account, which can disclose the user password in a POP3 error message. This is a remote-authenticated exposur...