[Hat-Squad] Remote buffer overflow in Mdaemon Raw message Handler

Hat-Squad Security Team Advisory http://www.hat-squad.com Product: Alt-N Technologies Mdaemon Mail Server Version: MDaemon 6.85 and Below to 6.52 Vulnerability: Remote buffer overflow in Raw Message Handler Release Date: 12/29/2003 Vendor Status: Informed on 29 Dec 2003 Quick response on 29 Dec...

mdaemon-raw.txt

Hat-Squad Security Team Advisory http://www.hat-squad.com Product: Alt-N Technologies Mdaemon Mail Server Version: MDaemon 6.85 and Below to 6.52 Vulnerability: Remote buffer overflow in Raw Message Handler Release Date: 12/29/2003 Vendor Status: Informed on 29 Dec 2003 Quick response on 29 Dec...

[NT] MERCUR Mail Server Control-Service Vulnerability (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[Full-Disclosure] Vulnerability in MERCUR Mail Server v4.2 SP3 and below

Vulnerability in MERCUR Mail Server v4.2 SP3 and below ------------------------------------------------------ To K-Otik or any other : the vulnerability was not discovered by Qualys as stated on your site. Summary ------- http://www.atrium-software.com/ MERCUR Mail Server offers the necessary...

FloosieTek FTGatePro 1.22 - Mail Server Cross-Site Scripting

FloosieTek FTGatePro 1.22 - Mail Server Cross-Site Scripting source: https://www.securityfocus.com/bid/8528/info FloosieTek FTGatePro Mail Server is prone to a cross-site scripting vulnerability. A remote attacker could exploit this issue by enticing a legitimate user of the mail server to follow...

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue...

FloosieTek FTGatePro 1.22 - Mail Server Cross-Site Scripting

source: https://www.securityfocus.com/bid/8528/info FloosieTek FTGatePro Mail Server is prone to a cross-site scripting vulnerability. A remote attacker could exploit this issue by enticing a legitimate user of the mail server to follow a malicious link with embedded HTML and script code. The...

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue exists in the web administrative interface, which listens on...

[NT] Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail Server

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...

Kerio Mail Server multiple bugs

Multiple buffer overflows in WebMail interface. Crossite scripting...

Winmail Mail Server 2.3 Remote Format String Exploit

Exploit for unknown platform in category remote exploits ==================================================== Winmail Mail Server 2.3 Remote Format String Exploit ==================================================== / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by Threa...

ArGoSoft Mail Server 1.8.3.5 - GET Multiple Denial of Service Vulnerabilities

ArGoSoft Mail Server 1.8.3.5 - GET Multiple Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/7873/info ArGoSoft Mail Server has been reported prone to a denial of service condition when handling multiple GET requests, in rapid succession. An attacker may exploit this...

ArGoSoft Mail Server 1.8.3.5 - GET Multiple Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/7873/info ArGoSoft Mail Server has been reported prone to a denial of service condition when handling multiple GET requests, in rapid succession. An attacker may exploit this condition to effectively deny service to legitimate ArGoSoft Mail server user...

Winmail Mail Server 2.3 Build 0402 - Remote Format String

/ Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by ThreaT. This one take advantage of a format bug in the SMTP protocol smtp port + The command to execute cannot exceed 90 characters + compile : cl.exe mwmxploit.c /w / include include pragma comment lib,"wsock32.lib" void...

ArGoSoft Mail Server HTTP Daemon GET Request Saturation DoS

It is possible to kill the remote HTTP server by sending an invalid request to it. An unauthenticated attacker may leverage this issue to crash the affected server. C Tenable Network Security, Inc. From: "[email protected]" To: [email protected] Subject: Denial of Service Attack against...

Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail server v.4.2 (SP2) - IMAP protocol

STATUS, EXAMINE, DELETE, SUBSCRIBE, UNSUBSCRIBE, RENAME, LIST, LSUB, LOGIN, CREATE, SELECT Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail server v.4.2 SP2 http://www.atriumsoftwareusa.com/ Discovered by Dennis Rand www.Infowarfare.dk...

CVE-2003-0263

Multiple buffer overflows in Floosietek FTGate Pro Mail Server FTGatePro 1.22 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

ArGoSoft 1.8.x - Authentication Bypass

ArGoSoft 1.8.x - Authentication Bypass source: https://www.securityfocus.com/bid/7608/info A vulnerability has been reported for ArGoSoft Mail Server FreeWare version. The problem occurs due to the FreeWare version of ArGoSoft failing to carry out sufficient authentication before granting access ...

ArGoSoft 1.8.x - Authentication Bypass

source: https://www.securityfocus.com/bid/7608/info A vulnerability has been reported for ArGoSoft Mail Server FreeWare version. The problem occurs due to the FreeWare version of ArGoSoft failing to carry out sufficient authentication before granting access to the user management interface. As a...

CVE-2003-0263

Multiple buffer overflows in Floosietek FTGate Pro Mail Server FTGatePro 1.22 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...