1987 matches found
UW IMAP: CRAM-MD5 authentication bypass
Background UW IMAP is the University of Washington IMAP toolkit which includes POP3 and IMAP daemons. Description A logic bug in the code handling CRAM-MD5 authentication incorrectly specifies the condition for successful authentication. Impact An attacker could exploit this vulnerability to...
SmarterTools SmarterMail Attachment Upload XSS
There are flaws in the remote SmarterMail, a web mail interface. This version of SmarterMail is affected by a cross-site scripting issue. An attacker, exploiting this flaw, would be able to steal user credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ;...
Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes
ShineShadow Security Report 26012005-03 TITLE: Multiple vulnerabilities in Icewarp Web Mail 5.3.0 : New holes. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest, most stable, secur...
HexView Security Advisory 2601-20-05.03
ShineShadow Security Report 26012005-03 TITLE: Multiple vulnerabilities in Icewarp Web Mail 5.3.0 : New holes. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest, most stable, secur...
CVE-2005-0320
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter to login.html, 2 accountid parameter to accountsettingsadd.html, or the 3 note, 4 title, and 5 location...
DEBIAN-CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...
CVE-2004-2494
Cross-site scripting XSS vulnerability in error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter...
CVE-2004-2447
Cross-site scripting XSS vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to 1 viewmail.tagz, 2 the index script under /user/, 3 members.tagz, 4 general.tagz, 5 advanced.tagz, or 6 list.tagz...
CVE-2004-2446
Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." dot dot sequences in unknown vectors...
CVE-2004-2503
INweb Mail Server 2.40 allows remote attackers to cause a denial of service crash via a large number of connect/disconnect actions to the 1 POP3 and 2 SMTP services...
ArGoSoft Mail Server < 1.8.7.0 Unspecified XSS
Binary data 2473.prm...
ArGoSoft Mail Server Unspecified XSS
The remote host is running the ArGoSoft WebMail interface. There is a flaw in this interface that could allow an attacker to conduct cross-site scripting XSS attacks against users. No further details have been provided. Nessus solely relied on the banner of this service to issue this alert...
000102advisory.txt
Hat-Squad Advisory: Remote buffer overflow in MailEnable IMAP service Product: MailEnable Mail Server Vendor Url: http://www.mailenable.com Version: MailEnable Professional Edition v1.52, MailEnable Enterprise Edition v1.01 Vulnerability: Remote buffer overflow in IMAP service Release Date: 26...
Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003.
Summary: Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003 http://www.pmail.com/. Details: Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003. There are 14 vulnerable commands that can be used to cause buffer overflows to occur. After a successful login to the mail...
Mercury/32 Mail Server <= 4.01a (check) Buffer Overflow Exploit
Exploit for unknown platform in category dos / poc =============================================================== Mercury/32 Mail Server Mercury32Overflow.pl 127.0.0.1 hello moto Mercury/32, v4.01a, Dec 8 2003 Download: http://www.pmail.com/ use IO::Socket; use strict; my$socket = ""; if $socket...
Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (2)
/ Remote Mercury32 Imap exploit 14 types of attacks WOW! By: [email protected] Notes: Second public release and both of them are murcury32 ; Again someone posted some dos code : why bother? If you spent the time to look, it uses the same buffer for all 14 types of attacks and the size does not...
Mercury/32 Mail Server <= 4.01a (check) Buffer Overflow Exploit
No description provided by source. ===== Start Mercury32Overflow.pl ===== Usage: Mercury32Overflow.pl ip imap4 user imap4 pass Mercury32Overflow.pl 127.0.0.1 hello moto Mercury/32, v4.01a, Dec 8 2003 Download: http://www.pmail.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...
Mercury32 Mail Server 4.01a - check Buffer Overflow
Mercury32 Mail Server 4.01a - check Buffer Overflow ===== Start Mercury32Overflow.pl ===== Usage: Mercury32Overflow.pl Mercury32Overflow.pl 127.0.0.1 hello moto Mercury/32, v4.01a, Dec 8 2003 Download: http://www.pmail.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...
Mercury32 Mail Server 4.01 - Pegasus IMAP Buffer Overflow (2)
Mercury32 Mail Server 4.01 - Pegasus IMAP Buffer Overflow 2 / Remote Mercury32 Imap exploit 14 types of attacks WOW! By: [email protected] Notes: Second public release and both of them are murcury32 ; Again someone posted some dos code : why bother? If you spent the time to look, it uses the sa...
Mercury/32 Mail Server 4.01a - 'check' Buffer Overflow
===== Start Mercury32Overflow.pl ===== Usage: Mercury32Overflow.pl Mercury32Overflow.pl 127.0.0.1 hello moto Mercury/32, v4.01a, Dec 8 2003 Download: http://www.pmail.com/ use IO::Socket; use strict; my$socket = ""; if $socket = IO::Socket::INET-newPeerAddr = $ARGV0, PeerPort = "143", Proto = "TC...