76 matches found
slmail5x.txt
SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0942 INTRO: SLMail Pro is web-based POP3 and SMTP email server software for MicrosoftT Windows 2000 that includes advanced features usually found in enterprise-level systems. Seattlelab...
SLMail 5.5 POP3 PASS Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================ SLMail 5.5 POP3 PASS Buffer Overflow Exploit ============================================ SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts WWW.WHITEHAT.CO.IL Plain vanill...
Seattle Lab Mail (SLmail) 5.5 - POP3 PASS Remote Buffer Overflow (1)
Seattle Lab Mail SLmail 5.5 - POP3 PASS Remote Buffer Overflow 1 SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts www.offsec.com Plain vanilla stack overflow in the PASS command D:\Projects\BOSLmail-5.5-POP3-PASS.py D:\Projects\BOnc -v 192.168.1.167 4444 localhost.lan...
SLMail 5.5 POP3 PASS Buffer Overflow Exploit
No description provided by source. SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts WWW.WHITEHAT.CO.IL Plain vanilla stack overflow in the PASS command D:\Projects\BOSLmail-5.5-POP3-PASS.py D:\Projects\BOnc -v 192.168.1.167 4444 localhost.lan 192.168.1.167 4444 ? open...
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1)
SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts www.offsec.com Plain vanilla stack overflow in the PASS command D:\Projects\BOSLmail-5.5-POP3-PASS.py D:\Projects\BOnc -v 192.168.1.167 4444 localhost.lan 192.168.1.167 4444 ? open Microsoft Windows 2000 Version 5.00.2195 C...
SLMail SMTP Multiple Overflows
Binary data 2036.prm...
Multiple SLMail bugs
Buffer overflows in webmail and Supervisor Report Center interface...
SLMail Pro Supervisor Report Center Buffer Overflow (#NISR05022004a)
NGSSoftware Insight Security Research Advisory Name: SLMail Pro Supervisor Report Center Buffer Overflow Systems Affected: SLMail Pro version 2.0.9 and earlier on Windows. Severity: High Risk Vendor URL: http://www.slmail.com/ Author: David Litchfield [email protected] Date Vendor Notified: 7...
Multiple SLMail/SLWebMail bugs
Multiple buffer overflows, file access, etc...
CVE-2003-0264
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via 1 a long EHLO argument to slmail.exe, 2 a long XTRN argument to slmail.exe, 3 a long string to POPPASSWD, or 4 a long password to the POP3 server...
CVE-2003-0264
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via 1 a long EHLO argument to slmail.exe, 2 a long XTRN argument to slmail.exe, 3 a long string to POPPASSWD, or 4 a long password to the POP3 server...
CVE-2003-0264
CVE-2003-0264 affects SLMail/Seattle Lab Mail 5.1.0.4420, where multiple buffer overflows in slmail.exe allow remote code execution. The overflow conditions involve excessively long EHLO, XTRN, POPPASSWD, or POP3 password fields, enabling an attacker to run arbitrary code with network access. Pub...
SLMail WebMail Multiple Remote Overflows
The remote host is running a version of the SLmail WebMail server which is vulnerable to various flaws. These flaws may let a user to execute arbitrary code on this host or read arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Refs: From: "NGSSoftware Insight Security Researc...
SLMail < 5.1.0.4433 Multiple Command Remote Overflows
The remote host is running a version of the SLmail SMTP server which is vulnerable to various overflows which may allow to execute arbitrary commands on this host or to disable it remotely. C Tenable Network Security, Inc. Refs: From: "NGSSoftware Insight Security Research" To: Subject: Multiple...
Multiple Buffer Overflow Vulnerabilities in SLMail (#NISR07052003A)
NGSSoftware Insight Security Research Advisory Name: Multiple Buffer Overflows in SLMail Systems Affected: SLMail 5.1.0.4420 on Windows Severity: High Risk Vendor URL: http://www.slmail.com Authors: David Litchfield [email protected] Mark Litchfield [email protected] Date: 7th May 2003...
CVE-1999-0380
SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service RAS is enabled by setting a user's Finger File to point to the target file, then running finger on the user...
CVE-1999-0380
CVE-1999-0380 affects SLMail 3.1 and 3.2. When Remote Administration Service (RAS) is enabled, an attacker can point a user’s Finger File to a target file and, after running finger, access NTFS files locally. The underlying cause is the Finger service handling a user file reference insecurely, en...
CVE-1999-1265
The CVE-1999-1265 entry affects the SLmail SMTP server (3.1 and earlier). The root cause is processing malformed commands beginning with a "(" character, e.g., SEND, VRFY, EXPN, MAIL FROM, RCPT TO, leading to a denial of service. The provided documents do not specify a patch or workaround. Exploi...
CVE-1999-1265
SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a "" parenthesis character, such as 1 SEND, 2 VRFY, 3 EXPN, 4 MAIL FROM, 5 RCPT TO...
CVE-1999-0231
This CVE affects IP-Switch IMail and Seattle Labs Slmail 2.6, caused by a buffer overflow triggered by a long VRFY command. Impact: denial of service and potentially remote access. Remediation: for Seattle Labs Slmail 2.6, disable VRFY until a patch is available; for IP-Switch IMail, no fix/versi...