EUVD-2000-0606

Malware in sbrugna...

EUVD-2000-0607

Malware in sbrugna...

EUVD-2000-0604

Malware in sbrugna...

EUVD-2000-0421

Malware in sbrugna...

CVE-2000-0611

The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service...

CVE-2000-0611

The CVE-2000-0611 entry concerns NetWin dMailWeb and cwMail in default configurations that trust all POP servers. The underlying issue is a trust/bypass of normal authentication, potentially enabling a denial of service. Documents confirm the affected software and the root cause (trust in POP ser...

CVE-2000-0610

NetWin dMailWeb and cwMail 2.6g and earlier are affected by a vulnerability that allows remote attackers to bypass authentication and relay mail through the server by supplying a username that contains a carriage return. This entry is documented in CVE-2000-0610 with an NVD base score of 5.0 (Med...

CVE-2000-0610: Undefined Security Weakness

NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return...

CVE-2000-0611: Undefined Security Weakness

The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service...

CVE-2000-0609

NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter...

CVE-2000-0608

NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter pophost...

CVE-2000-0608: Undefined Security Weakness

NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter pophost...

CVE-2000-0609: Undefined Security Weakness

NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter...

NetWin dMailWeb Unrestricted Mail Relay

Product: NetWin dMailWeb Type: Unrestricted Mail Relay Severity: Moderate Versions: = 2.6g: Case A All, configuration error: Case B Note: NetWin cwMail also appears vulnerable to the same attacks, and appears to be using exactly the same version numbers. --- Overview dMailWeb is a CGI application...

CVE-2000-0611

The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service...

NetWin dMailWeb Denial of Service

Product: NetWin dMailWeb Type: Denial of Service Severity: Moderate Versions: = 2.6j: potential buffer overflow in pophost not fixed = 2.6i: pophost DOS fixed by 2.6j = 2.6g: username DOS fixed by 2.6i Note: NetWin cwMail is also vulnerable to the same attacks, and appears to be using exactly the...

CVE-2000-0608

NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter pophost...

CVE-2000-0609

NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter...

CVE-2000-0422

Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter...

CVE-2000-0422

CVE-2000-0422 : Buffer overflow in the Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. Affected component: Netwin DMailWeb CGI. Impact: arbitrary command execution; no patch/mitigation details are provided in the supplied documents. E...