162 matches found
EUVD-2003-0648
Malware in sbrugna...
EUVD-2005-1518
Malware in sbrugna...
EUVD-1999-0250
Malware in sbrugna...
CVE-2020-15955
In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the MitM attacker...
CVE-2003-0654
Buffer overflow in autorespond may allow remote attackers to execute arbitrary code as the autorespond user via qmail...
SUSE CVE-2005-1513
Integer overflow in the strallocreadyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request...
SUSE CVE-2011-1431
The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TL...
Qmail 跨站请求伪造漏洞
Qmail is a suite of mail transfer agent software written in C and running on Unix-like operating systems by the individual developer Daniel J. Bernstein. Qmail has a cross-site request forgery vulnerability that stems from. We have fixed this vulnerability in the following QmailAgent...
CVE-2020-15955
In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the MitM attacker...
Command injection
In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the MitM attacker...
CVE-2020-15955
In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the MitM attacker...
CVE-2020-15955
The CVE-2020-15955 issue affects s/qmail up to version 4.0.07, where an active MitM can inject arbitrary plaintext commands into a STARTTLS session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the attacker. The root cause is the ability to tam...
s/qmail 命令注入漏洞
s/qmail is a software application. A Qmail-based Mail Transfer Agent MTA for high-speed and confidential e-mail transmission over IPv4 and IPv6 networks. A security vulnerability exists in s/qmail that allows e-mail messages and user credentials to be sent to a MitM attacker who can exploit the...
PT-2021-9848
Name of the Vulnerable Software and Affected Versions s/qmail versions prior to 4.0.08 Description The issue allows an active Man-in-the-Middle MitM to inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This enables the attacker to intercept...
CVE-2020-15955: Improper Neutralization of Special Elements used in a Command
In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the MitM attacker...
The vulnerability of the qmail-verify module in the netqmail email client allows a hacker to compromise data integrity.
The vulnerability of the qmail-verify module in the netqmail email client is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to compromise the integrity of data...
The vulnerability of the qmail-verify module in the netqmail email client allows a hacker to gain access to confidential data.
The vulnerability of the qmail-verify module in the netqmail email client is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to access confidential data...
netqmail: Multiple vulnerabilities
Background qmail is a secure, reliable, efficient, simple message transfer agent. Description Multiple vulnerabilities have been discovered in netqmail. Please review the CVE identifiers referenced below for details. Impact In the default configuration, these vulnerabilities are only local. Pleas...
Qmail SMTP 1.03 - Bash Environment Variable Injection
Exploit Title: Qmail SMTP 1.03 - Bash Environment Variable Injection Date: 2020-07-03 Exploit Author: 1F98D Original Authors: Mario Ledo, Mario Ledo, Gabriel Follon Version: Qmail 1.03 Tested on: Debian 9.11 x64 CVE: CVE-2014-6271 References: http://seclists.org/oss-sec/2014/q3/649...
Debian DLA-2234-1 : netqmail security update
There were several CVE bugs reported against src:netqmail. CVE-2005-1513 Integer overflow in the strallocreadyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code vi...