IMC SMTP EHLO Buffer Overrun

A security vulnerability results because of an unchecked buffer in the IMC code that generates the response to the EHLO protocol command. If the buffer were overrun with data it would result in either the failure of the IMC or could allow the attacker to run code in the security context of the IM...

CVE-2005-1650

The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-1650

The CVE-2005-1650 entry applies to Woppoware PostMaster 4.2.2, where the web mail service returns different error messages based on whether a user exists. This behavior allows remote attackers to enumerate valid usernames, constituting an information disclosure issue. The Red Hat and CVE records ...

PT-2005-2627 · Woppoware · Woppoware Postmaster

Name of the Vulnerable Software and Affected Versions: Woppoware PostMaster version 4.2.2 Description: The web mail service in the affected software generates different error messages depending on whether a user exists or not. This allows remote attackers to determine valid usernames...

CVE-2003-0714

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service memory exhaustion by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000...

CVE-2003-0714

The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service memory exhaustion by directly connecting to the SMTP service and sending a certain extended verb request, possibly triggering a buffer overflow in Exchange 2000...

CVE-2003-0714

CVE-2003-0714 affects Microsoft Exchange Server’s Internet Mail Service in Exchange Server 5.5 and Exchange 2000. The issue enables remote attackers to cause a denial of service via memory exhaustion by connecting to SMTP and issuing a specific extended verb request, with a potential buffer overf...

Postfix vulnerable to DoS by supplying a remote SMTP listener with a malformed envelope address

Overview A denial-of-service vulnerability exists in all versions of Postfix prior to 2.0. This vulnerability may allow a remote attacker to cause mail service interruption. Description Postfix is a very popular mail transfer agent MTA. Michal Zalewski has discovered a denial-of-service...

Security holes in two Teekai's products + security hole in ncmail.netscape.com

Hi : Products : Tracking Online 1.0 Teekai's forum full 1.2 http://www.teekai.info Problems : Tracking Online & Teekai's forum : - Informations recovery - Informations decoding Teekai's forum : - Admin access - small holes Tracking Online : -XSS Exploits : Forum & Tracking : - Php file to decode...

exchange.dos.txt

The following body of the e-mail message causes Microsoft Exchange 5.5 SP3 Internet Mail Service and Information Store to crash Refer to Microsoft Security Bulletin MS00-082 http://www.microsoft.com/technet/security/bulletin/ms00-082.asp. Patch is available here:...

Critical_Path_CSS

Security Advisory: Cross-site scripting vulnerability compromises accounts on Altavista, ICQ, US West/Qwest, others Date 21 August 2000 Author Jeffrey W. Baker, email [email protected] Copyright statement This security advisory is Copyright 2000 by Jeffrey William Baker [email protected]. The advisor...