578 matches found
QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities
QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these...
QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these issues to crash the affected application, denying service to legitimate users. These...
QK SMTP Server 3 - Denial of service
Apparently this SMTP server crashes when creating a mail poorly trained causing a denial of service. Proof-of-concept HELO ../A/ 950 MAIL FROM: ../A/ 950 RCPT TO: ../A/ 950 data ../A/ 950 . Juan Pablo Lopez Yacubian http://fuzzertina.blogspot.com/...
QK SMTP Server DoS
No description provided...
Ipswitch IMail SMTP Server IMail客户端远程缓冲区溢出漏洞
Ipswitch IMail SMTP Server IMail Client是一款提供对IMail服务器进行管理的客户端。 IMail Client客户端处理畸形multipart MIME数据存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理EMAIL中包含multipart MIME数据时，如果"boundary"参数设置超过212字节，可导致触发基于段的缓冲区溢出，精心构建EMAIL数据并诱使用户打开，可导致以应用程序进程权限执行任意指令。 Ipswitch IMail Client 9.22 + Compaq Insight Manager...
CVE-2007-5213
Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...
CVE-2007-5094
The CVE pertains to Ipswitch IMail Server (8.01–8.11) where a heap-based buffer overflow in iaspam.dll within the SMTP Server can be triggered by συγκεκριed malformed Content-Type headers (long boundary parameter, a lone “MIME” line, and long Content-Transfer-Encoding lines). This allows remote c...
CVE-2007-5094
Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by...
ipswitch80x-heap.txt
/ by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org ÒÔÇ°ÓÐÕâžöÒ»žöimailµÄexp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d options Options: -d: Hostname to attack Required -t: Type Default: 0 -p: Attack port...
IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit
No description provided by source. / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org 脪脭脟掳脫脨脮芒啪枚脪禄啪枚imail碌脛exp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d host options Options: -d: Hostname to attack Required -...
IPSwitch IMail Server 8.0x - Remote Heap Overflow
IPSwitch IMail Server 8.0x - Remote Heap Overflow / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org ÒÔÇ°ÓÃÕâžöÒ»žöimailµÄexp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d options Options: -d:...
IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit
Exploit for unknown platform in category remote exploits ======================================================= IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit ======================================================= / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List:...
IPSwitch IMail Server 8.0x - Remote Heap Overflow
/ by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org ÒÔÇ°ÓÃÕâžöÒ»žöimailµÄexp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d options Options: -d: Hostname to attack Required -t: Type Default: 0 -p:...
Microworld eScan (Multiple Products) - Local Privilege Escalation
source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...
Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit
No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP...
Mercury SMTP Server AUTH CRAM-MD5 Remote Buffer Overflow
The remote host is running the Mercury Mail Transport System, a free suite of server products for Windows and NetWare associated with Pegasus Mail. The version of Mercury Mail installed on the remote host includes an SMTP server that is affected by a buffer overflow flaw. Using a specially crafte...
CVE-2007-4440
Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961...
Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007
Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007 Mercury/32 v4.52 is a security patch release, addressing a serious weakness in the MercuryS SMTP server specifically, a buffer overflow vulnerability in the way the server processes the AUTH command. All v4.x versions of Mercury earlier than v4.51...