Man-in-the-Middle (MitM)

github.com/golang/go is vulnerable to man-in-the-middle MitM attack. A malicious user can set up a MitM SMTP server that doesn't advertise STARTTLS and advertises that PLAIN authentication can be used. By doing this, smtp.PlainAuth will send the username and password will be sent to the server...

Apache Qpid Java Broker Denial of Service Vulnerability

Apache Qpid Java Broker is the United States Apache Apache Software Foundation developed a use of the Java language written for routing and forwarding mail message middleware. A security vulnerability exists in Apache Qpid Java Broker. When the PLAIN mechanism is enabled in the program, an attack...

eXtremail <= 2.1.1 PLAIN authentication Remote Stack Overflow Exploit

No description provided by source. / extremail-v6.c Copyright c 2006 by [email protected] eXtremail =2.1.1 remote root exploit x86-lnx by mu-b - Wed Oct 18 2006 - Tested on: eXtremail 2.1.1 lnx eXtremail 2.1.0 lnx Stack overflow in ifParseAuthPlain ...

eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow

/ extremail-v6.c Copyright c 2006 by eXtremail include include include include include define BUFSIZE 2048 define BBUFSIZE BUFSIZE/34+1 define NOP 0x41 define AUTHCMD "1 AUTHENTICATE PLAIN\n" define DEFPORT 143 define PORTIMAPD DEFPORT define PORTSHELL 4444 static const char movshelllnx =...