MailEnable mail server format string bug

Format string bug in SMTP MAIL FROM: command...

NotifyLink server provides inadequate protection for cryptographic key material

Overview The NotifyLink key exchange protocol contains a vulnerability that significantly reduces the strength of cryptographic keys used to encrypt mail messages. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The...

NotifyLink contains multiple SQL injection vulnerabilities

Overview There are multiple vulnerabilities in NotifyLink that allow unauthenticated remote users to view or modify the contents of the NotifyLink SQL database. Possible modifications include the addition of unauthorized user and administrator accounts. Description Notify Technology NotifyLink...

IPSwitch IMAIL Mail server IMAP buffer overflow

Buffer overflow in IMAP DELETE and EXAMINE commands...

Eudora Internet Mail Server for Mac OS USER Overflow

The remote poppassd daemon crashes when a too long name is sent after the USER command. It might be possible for a remote attacker to run arbitrary code on this machine. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17295; scriptversion"1.14";...

FoxMail Mail server buffer overflow

Buffer overflow on SMTP "MAIL FROM:" and "USER" command...

CVE-2004-1722

SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule parameter...

CVE-2004-1721

The 1 function.php or 2 function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000...

CVE-2004-1722

CVE-2004-1722: SQL injection in Merak Mail Server 5.2.7’s calendar.html allows remote attackers to execute arbitrary SQL via the schedule parameter. Public records confirm the affected product/version and the SQLi impact; no additional exploit details are provided in the supplied documents beyond...

CVE-2004-1720

CVE-2004-1720 concerns Merak Mail Server 5.2.7 where an invalid HTTP request on address.html (and possibly calendar.html) can reveal the installation path via web logs or responses. The NVD entry notes partial confidentiality impact with a base score of 5.0 (MEDIUM). Connected documents also desc...

CVE-2004-1721

CVE-2004-1721 affects Merak Mail Server 5.2.7, where the (1) function.php or (2) function.view.php scripts allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000. This is a PHP source disclosure/information exposure vulnerability, enabling an attacker to obtain...

CVE-2004-1720

The 1 address.html and possibly 2 calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web log...

Cyrus IMAP mail server multiple bugs

Multiple buffer overflows, memory corruptions...

CVE-2004-1671

The CVE-2004-1671 entry describes an information disclosure in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 (and possibly other versions). The vulnerability allows remote attackers to gain sensitive information via direct requests to two web pages: accountsettings_add.html and topmenu.html...

CVE-2004-1672

CVE-2004-1672 affects Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions. A flaw in attachment.html allows remote attackers to view other users’ attachments by crafting an HTTP request that specifies a username and a message ID, enabling partial confidentiality loss (...

CVE-2004-1669

CVE-2004-1669 describes a cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 when used with IceWarp Web Mail 5.2.7 (and possibly other versions). The issue allows remote attackers to run arbitrary HTML/JavaScript in a victim’s browser by supplying malicious input to (1) the User ...

CVE-2004-1670

Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to 1 create arbitrary directories via a .. dot dot in the user parameter to viewaction.html or 2 rename arbitrary files via a ....// doubled dot do...

CVE-2004-1674

The CVE-2004-1674 entry concerns Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 (and possibly other versions). The vulnerability is in viewaction.html, where input parameters originalfolder and messageid enable remote attackers to perform file operations. Specifically, attackers can delete a...

CVE-2004-1673

accountsettingsadd.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter...

CVE-2004-1669

Cross-site scripting XSS vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the 1 User name parameter to accountsettings.html or 2 Search string parameter to search.html...