Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/801/info Certain versions of EmailClub, a mail server package by Admiral Systems Inc. are vulnerable to a remote buffer overflow. This overflow is exploitable via EmailClub's POP3 server which fails to perform proper bounds checking on the 'From:' head...

NetCPlus SmartServer3 POP3 (NCPOPSERV.EXE) USER Command Remote Overflow

The remote pop3 server seems vulnerable to a buffer overflow when issued a very long command. This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: doma...

CVE-1999-1511

Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service crash and possibly execute arbitrary commands via 1 a long PASS command in the POP3 service, 2 a long HELO command in the SMTP service, or 3 a long user name in the Control Service...

XtraMail POP3 PASS Command Remote Overflow

The remote POP3 server is vulnerable to the following buffer overflow : USER test PASS This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10325; scriptversion"1.48";...

Ipswitch IMail 5.0.55.0.65.0.7 - POP3 Denial of Service Buffer Overflow (PoC)

Ipswitch IMail 5.0.55.0.65.0.7 - POP3 Denial of Service Buffer Overflow PoC / source: https://www.securityfocus.com/bid/789/info There is a buffer overflow in the username field when the username is between 200 and 500 characters. Although it may be possible to execute arbitrary code on the...

Ipswitch IMail 5.0.5/5.0.6/5.0.7 - POP3 Denial of Service / Buffer Overflow (PoC)

/ source: https://www.securityfocus.com/bid/789/info There is a buffer overflow in the username field when the username is between 200 and 500 characters. Although it may be possible to execute arbitrary code on the vulnerable server, current exploits only cause a denial of service on the remote...

CVE-2000-0016

Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username...

True North Software Internet Anywhere Mail Server 2.3.x - Mail Server Multiple Buffer Overflow

// source: https://www.securityfocus.com/bid/730/info // // True North Software's Internet Anywhere Mail Server has various weaknesses that could allow an attacker to remotely crash the server running this software.. The POP3 commands "list", "retr" .uidl" and "user" and the SMTP command "vrfy", ...

CVE-1999-0272

Slmail v2.5 is affected by a denial-of-service issue via the POP3 port. The connected PT-1997-1116 entry recommends upgrading Slmail past 2.5 or restricting POP3 access as a mitigation. The root cause is not detailed in the provided documents; no exploits are described here.

CVE-1999-0272

Denial of service in Slmail v2.5 through the POP3 port...

CVE-1999-0494

CVE-1999-0494 concerns a denial-of-service against the WinGate proxy caused by a buffer overflow in the POP3 service. The connected documents consistently describe a DoS via POP3 processing in WinGate’s proxy, with no confirmed exploitation details beyond the historical report. The root cause cit...

CVE-1999-0494

Denial of service in WinGate proxy through a buffer overflow in POP3...

CVE-1999-0494: Undefined Security Weakness

Denial of service in WinGate proxy through a buffer overflow in POP3...

CVE-1999-0272: Undefined Security Weakness

Denial of service in Slmail v2.5 through the POP3 port...

mail_bof.txt

Subject: Many kind of POP3/SMTP server softwares for Windows have buffer overflow bug To: [email protected] Many kind of POP3/SMTP server softwares for Windows have buffer overflow bug by The Shadow Penguin Securuty http://shadowpenguin.backsection.net 1. Introduction I confirmed many kin...

pegasus.mail.passwd.txt

Date: Sat, 15 May 1999 12:42:12 +0000 From: galldor To: [email protected] Subject: Pegasus Mail weak encryption --------------------------------------------------------------------- Pegasus Mail Weak Encryption Versions Effected: ALL but I wrote about the V2 encryption on 3.0+ Bug Found by:...

outlook.express.mailbox.dos.txt

Outlook Express Win98 bug Miquel van Smoorenburg [email protected] Tue, 11 May 1999 10:58:41 +0200 There is a bug in Outlook Express delivered with Windows '98, at least version 4.72.3110.1 4.01 SP1 and 4.72.3120.0 4.01 SP1 + oepatsp1 Windows '95 updated with MSIE 4.01 has Outlook Express...

CVE-1999-0673

Buffer overflow in ALMail32 POP3 client via From: or To: headers...

Multiple Vendor POP3 Remote Overflows

The remote POP3 server might be vulnerable to a buffer overflow bug when it is issued at least one of these commands, with a too long argument : AUTH USER PASS If confirmed, this problem might allow an attacker to execute arbitrary code on the remote system. C Tenable Network Security, Inc. Scrip...

WinGate Proxy POP3 USER Overflow

The remote POP3 server, which is probably part of WinGate, could be crashed with the following command : USER x999...999 This problem may prevent users on your network from retrieving their emails. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...