FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue exists in the web administrative interface, which listens on...

[NT] Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail Server

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...

Kerio Mail Server multiple bugs

Multiple buffer overflows in WebMail interface. Crossite scripting...

ArGoSoft Mail Server 1.8.3.5 - GET Multiple Denial of Service Vulnerabilities

ArGoSoft Mail Server 1.8.3.5 - GET Multiple Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/7873/info ArGoSoft Mail Server has been reported prone to a denial of service condition when handling multiple GET requests, in rapid succession. An attacker may exploit this...

Winmail Mail Server 2.3 Remote Format String Exploit

Exploit for unknown platform in category remote exploits ==================================================== Winmail Mail Server 2.3 Remote Format String Exploit ==================================================== / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by Threa...

ArGoSoft Mail Server HTTP Daemon GET Request Saturation DoS

It is possible to kill the remote HTTP server by sending an invalid request to it. An unauthenticated attacker may leverage this issue to crash the affected server. C Tenable Network Security, Inc. From: "[email protected]" To: [email protected] Subject: Denial of Service Attack against...

ArGoSoft Mail Server 1.8.3.5 - GET Multiple Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/7873/info ArGoSoft Mail Server has been reported prone to a denial of service condition when handling multiple GET requests, in rapid succession. An attacker may exploit this condition to effectively deny service to legitimate ArGoSoft Mail server user...

Winmail Mail Server 2.3 Build 0402 - Remote Format String

/ Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by ThreaT. This one take advantage of a format bug in the SMTP protocol smtp port + The command to execute cannot exceed 90 characters + compile : cl.exe mwmxploit.c /w / include include pragma comment lib,"wsock32.lib" void...

Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail server v.4.2 (SP2) - IMAP protocol

STATUS, EXAMINE, DELETE, SUBSCRIBE, UNSUBSCRIBE, RENAME, LIST, LSUB, LOGIN, CREATE, SELECT Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail server v.4.2 SP2 http://www.atriumsoftwareusa.com/ Discovered by Dennis Rand www.Infowarfare.dk...

CVE-2003-0263

Multiple buffer overflows in Floosietek FTGate Pro Mail Server FTGatePro 1.22 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

ArGoSoft 1.8.x - Authentication Bypass

ArGoSoft 1.8.x - Authentication Bypass source: https://www.securityfocus.com/bid/7608/info A vulnerability has been reported for ArGoSoft Mail Server FreeWare version. The problem occurs due to the FreeWare version of ArGoSoft failing to carry out sufficient authentication before granting access ...

ArGoSoft 1.8.x - Authentication Bypass

source: https://www.securityfocus.com/bid/7608/info A vulnerability has been reported for ArGoSoft Mail Server FreeWare version. The problem occurs due to the FreeWare version of ArGoSoft failing to carry out sufficient authentication before granting access to the user management interface. As a...

CVE-2003-0263

CVE-2003-0263 describes multiple remote, stack-based buffer overflows in Floosietek FTGate Pro Mail Server v1.22 that allow an attacker to execute arbitrary code by sending excessively long MAIL FROM or RCPT TO commands. The vulnerability resides in command handling, enabling remote exploitation ...

CVE-2003-0263

Multiple buffer overflows in Floosietek FTGate Pro Mail Server FTGatePro 1.22 allow remote attackers to execute arbitrary code via long 1 MAIL FROM or 2 RCPT TO commands...

Multiple Buffer Overflow Vulnerabilities Found in FTGate Pro Mail Server v. 1.22 (1328)

Multiple Buffer Overflow Vulnerabilities Found in FTGate Pro Mail Server v. 1.22 1328 http://www.ftgate.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY FTGatePro is Floosietek's flagship server. The comprehensi...

FTGatePro Mail Server Multiple Command Remote Overflow

The remote SMTP server is running FT Gate Pro. There is a remote stack-based buffer overflow vulnerability in this version. This issue can be exploited by supplying a very long argument to the 'MAIL FROM' and 'RCPT TO' SMTP commands. A remote attacker could use this to crash the SMTP server, or...

FloosieTek FTGate PRO 1.22 - SMTP MAIL FROM Buffer Overflow

source: https://www.securityfocus.com/bid/7506/info A buffer overflow vulnerability has been reported for Floosietek FTGate PRO mail server. The vulnerability exists when the mail server attempts to process overly long SMTP 'Mail From' arguments. Due to the nature of this vulnerability it may be...

CVE-2002-1004

Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in a URL...

CVE-2002-1004

CVE-2002-1004 concerns ArGoSoft Mail Server Plus/Pro WebMail (≤1.8.1.5). The vulnerability is a directory traversal in the WebMail interface that allows remote attackers to read arbitrary files via …/ sequence in a URL. Affected: ArGoSoft Mail Server WebMail feature (versions up to 1.8.1.5 and ea...

smtpscan SMTP Fingerprinting

smtpscan is a SMTP fingerprinting tool written by Julien Bordet. It identifies the remote mail server even if the banners were changed. C Tenable Network Security, Inc. This NASL script is a quick and dirty conversion of smtpscan by Julien Bordet Note that smtpcan has more features than this simp...