1960 matches found
Courier mail server crossite scripting
Internet Explorer Conditional Comments crossite scripting with sqwebmail...
Mercury/32 Mail Server 4.01a (Pegasus) - IMAP Buffer Overflow
/ Mercury imap4 server remote buffer overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not available right now company address : www.pmail.com timeline : ...
Mercury32 Mail Server 4.01a (Pegasus) - IMAP Buffer Overflow
Mercury32 Mail Server 4.01a Pegasus - IMAP Buffer Overflow / Mercury imap4 server remote buffer overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not...
USN-174-1: courier vulnerability
A Denial of Service vulnerability has been discovered in the Courier mail server. Due to a flawed status code check, failed DNS domain name service queries for SPF sender policy framework were not handled properly and could lead to memory corruption. A malicious DNS server could exploit this to...
[SECURITY] [DSA 784-1] New courier packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 784-1 [email protected] http://www.debian.org/security/ Martin Schulze August 25th, 2005 http://www.debian.org/security/faq -...
DSA-784-1 courier - programming error
Bulletin has no description...
CVE-2004-2446
Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." dot dot sequences in unknown vectors...
CVE-2004-2447
Cross-site scripting XSS vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to 1 viewmail.tagz, 2 the index script under /user/, 3 members.tagz, 4 general.tagz, 5 advanced.tagz, or 6 list.tagz...
CVE-2004-2446
CVE-2004-2446 describes a directory traversal vulnerability in 1st Class Mail Server 4.01, enabling remote attackers to read arbitrary files via dot-dot sequences. The initial records indicate the affected product and impact (read access to files) but do not provide exploit vectors, affected vers...
CVE-2004-2447
CVE-2004-2447 is a cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01. The issue allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to six endpoints: viewmail.tagz, the index script under /user/, members.tagz, general.tagz, advanced.tagz, ...
CVE-2004-2375
Vulnerability CVE-2004-2375 affects the POP3 server in 1st Class Mail Server 4.0. A buffer overflow can be triggered by an APOP USER command with an excessively long second parameter (digest), potentially causing a denial of service and possibly allowing arbitrary code execution. Documented in CV...
HexView Security Advisory 0405-20-05.05
ShineShadow Security Report 04052005-05 TITLE: Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest,...
GLSA-200507-21 : fetchmail: Buffer Overflow
The remote host is affected by the vulnerability described in GLSA-200507-21 fetchmail: Buffer Overflow fetchmail does not properly validate UIDs coming from a POP3 mail server. The UID is placed in a fixed length buffer on the stack, which can be overflown. Impact : Very long UIDs returned from ...
MDaemon Content Filter Traversal Arbitrary File Write
According to its banner, the version of MDaemon on the remote host is prone to a directory traversal flaw that can be exploited to overwrite files outside the application's quarantine directory provided MDaemon's attachment quarantine feature is enabled. %NASLMINLEVEL 70300 C Tenable Network...
Multiple MDaemon mail server vulnerabilities
DoS on incomlete CRAM-MD4 handshake, buffer overflow on IMAP CREATE command...
Hosting Controller <= 6.1 HotFix 2.2 Add Domain without Quota Exploit
No description provided by source. !-- Change url /str0ke -- form method="post" name="addform" action="http://url/admin/iis/IISActions.asp?ActionType=AddSite&hostcustid=1&hostingplans=1" table tr class="looplistingDark" td width="19%" class="Contents"Website Name : /td td width="73%"...
PHPXMAIL - Authentication Bypass
Author: Stefan Lochbihler Date: 6. Juli 2005 Affected Software: PHPXMAIL Software Version: 0.7 - 1.1 Software URL: http://phpxmail.sourceforge.net/ Attack: Authentication Bypass Overview: PhpXmail is a web based management software for the Xmail mail server written in php. It's main usage is as a...
Lotus Notes mail server crossite scripting
HTML attachment content is not filtered in Web interface...
CVE-2005-2151
The CVE-2005-2151 issue affects Courier MTA where SPF DNS failures were not handled properly, potentially enabling memory corruption. Public descriptions across Debian and Ubuntu advisories confirm a remote programming error in Courier’s SPF handling, with SPF checks disabled by default on many s...