CVE-2005-1283

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...

ArGoSoft Mail Server Multiple Vulnerabilities

Binary data 2847.prm...

CVE-2004-1088

Postfix server for Apple Mac OS X 10.3.6 vulnerable when using CRAM-MD5: remote attackers can send mail without authentication by replaying authentication information. Reported CVSSv2 base score 7.5 (HIGH) with network attack vector and low attack complexity. The provided documents do not specify...

CommuniGate Pro mail server DoS

Bug in LIST module multipart messages handling...

Smail-3 < 3.2.0.121 Multiple Vulnerabilities

According to its banner, the remote host is running as its mail server S-mail version 3.2.0.120 or older. Such versions contain various vulnerabilities that may allow an unauthenticated attacker execute arbitrary code on the remote host by exploiting a heap overflow by sending a malformed argumen...

[SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities

SIG^2 Vulnerability Research Advisory SurgeMail Webmail Attachment Upload and XSS Vulnerabilities by Tan Chew Keong Release Date: 23 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/surgemail22g3.html SUMMARY SurgeMail http://netwinsite.com/surgemail/ is a next generation Mail Server -...

MailEnable mail server format string bug

Format string bug in SMTP MAIL FROM: command...

NotifyLink server provides inadequate protection for cryptographic key material

Overview The NotifyLink key exchange protocol contains a vulnerability that significantly reduces the strength of cryptographic keys used to encrypt mail messages. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The...

NotifyLink contains multiple SQL injection vulnerabilities

Overview There are multiple vulnerabilities in NotifyLink that allow unauthenticated remote users to view or modify the contents of the NotifyLink SQL database. Possible modifications include the addition of unauthorized user and administrator accounts. Description Notify Technology NotifyLink...

IPSwitch IMAIL Mail server IMAP buffer overflow

Buffer overflow in IMAP DELETE and EXAMINE commands...

Eudora Internet Mail Server for Mac OS USER Overflow

The remote poppassd daemon crashes when a too long name is sent after the USER command. It might be possible for a remote attacker to run arbitrary code on this machine. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17295; scriptversion"1.14";...

FoxMail Mail server buffer overflow

Buffer overflow on SMTP "MAIL FROM:" and "USER" command...

CVE-2004-1722

CVE-2004-1722: SQL injection in Merak Mail Server 5.2.7’s calendar.html allows remote attackers to execute arbitrary SQL via the schedule parameter. Public records confirm the affected product/version and the SQLi impact; no additional exploit details are provided in the supplied documents beyond...

CVE-2004-1720

CVE-2004-1720 concerns Merak Mail Server 5.2.7 where an invalid HTTP request on address.html (and possibly calendar.html) can reveal the installation path via web logs or responses. The NVD entry notes partial confidentiality impact with a base score of 5.0 (MEDIUM). Connected documents also desc...

CVE-2004-1721

CVE-2004-1721 affects Merak Mail Server 5.2.7, where the (1) function.php or (2) function.view.php scripts allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000. This is a PHP source disclosure/information exposure vulnerability, enabling an attacker to obtain...

CVE-2004-1722

SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule parameter...

CVE-2004-1721

The 1 function.php or 2 function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000...

CVE-2004-1720

The 1 address.html and possibly 2 calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web log...

Cyrus IMAP mail server multiple bugs

Multiple buffer overflows, memory corruptions...

CVE-2004-1674

viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to 1 delete arbitrary files via the originalfolder parameter or 2 move arbitrary files via the messageid parameter...