254 matches found
CVE-2000-0490
CVE-2000-0490 : Buffer overflow in the NetWin DSMTP 2.7q (NetWin dmail) allows remote attackers to execute arbitrary commands via a long ETRN request. Affected component is the DSMTP server; root cause is a buffer overflow in processing the ETRN arguments, leading to potentially arbitrary code ex...
CVE-2000-0610: Undefined Security Weakness
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return...
CVE-2000-0611: Undefined Security Weakness
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service...
CVE-2000-0490: Undefined Security Weakness
Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request...
CVE-2000-0782: Undefined Security Weakness
netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...
Netwin Netauth netauth.cgi Traversal Arbitrary File Access
The 'Netauth' CGI is installed. This CGI has a well-known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
netwin netauth 4.2 - Directory Traversal
netwin netauth 4.2 - Directory Traversal source: https://www.securityfocus.com/bid/1587/info A remote user is capable of gaining read access to any known file residing on a host running Netwin Netauth through directory traversal. Appending a series of '../' and the desired file name to the 'page'...
netwin netauth 4.2 - Directory Traversal
source: https://www.securityfocus.com/bid/1587/info A remote user is capable of gaining read access to any known file residing on a host running Netwin Netauth through directory traversal. Appending a series of '../' and the desired file name to the 'page' variable at the end of a request to...
CVE-2000-0609
NetWin dMailWeb and cwMail (≤2.6g) are susceptible to a denial-of-service triggered by a long username parameter, causing partial availability impact. The documents provide no detailed root-cause, exploit, official remediation, or patch information beyond the version range. No further technical s...
CVE-2000-0609
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter...
CVE-2000-0608
NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter pophost...
CVE-2000-0608
Technical details about CVE-2000-0608 are not publicly available in the provided documents. Monitor for updates.
CVE-2000-0609: Undefined Security Weakness
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter...
CVE-2000-0608: Undefined Security Weakness
NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter pophost...
NetWin dMailWeb Unrestricted Mail Relay
Product: NetWin dMailWeb Type: Unrestricted Mail Relay Severity: Moderate Versions: = 2.6g: Case A All, configuration error: Case B Note: NetWin cwMail also appears vulnerable to the same attacks, and appears to be using exactly the same version numbers. --- Overview dMailWeb is a CGI application...
CVE-2000-0611
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service...
NetWin dMailWeb Denial of Service
Product: NetWin dMailWeb Type: Denial of Service Severity: Moderate Versions: = 2.6j: potential buffer overflow in pophost not fixed = 2.6i: pophost DOS fixed by 2.6j = 2.6g: username DOS fixed by 2.6i Note: NetWin cwMail is also vulnerable to the same attacks, and appears to be using exactly the...
CVE-2000-0609
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter...