7008 matches found
Computalynx CMail 2.3 Web File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/281/info A vulnerability in Computalynx's CMail allows remote malicious users to steal local files. Compulynx's CMail is a Win32 mail server program. One of its features is allowing users to access their email with a web...
Inetserv 3.23 SMTP Denial of Service Vulnerability
No description provided by source. !/usr/bin/python Exploit Title: Inetserv 3.23 SMTP DoS Date: 1/22/2011 Author: G13 Software Link: http://www.avtronics.net/inetserv.php Version: 3.23 Tested on: WinXP SP0 Eng import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = EXPN + %s 40 +...
IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability
漏洞起因 栈溢出导致的远程代码执行 影响系统 Lotus Domino Server Versions 8.0 and 8.5 on AIX, AIX 64bit, Linux, Linux iSeries, Linux, zSeries, Solaris, Windows, Windows 64bit, z/OS 危害 远程攻击者可以利用漏洞在服务器上执行任意代码。 攻击所需条件 攻击者构造包含特殊参数的邮件。 漏洞信息 未经身份验证的远程代码执行漏洞是由于代码在识别处理和转换 iCalendar...
Multiple MicroWorld eScan Products Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with...
BusinessMail <= 4.60.00 Remote Buffer Overflow Exploit
No description provided by source. ===== Start BusMailSMTPDOS.pl ===== Usage: BusMailSMTPDOS.pl ip BusMailSMTPDOS.pl 127.0.0.1 BusinessMail email server system 4.60.00 Download: http://www.netcplus.com/ use IO::Socket; use strict; my$socket = ; if $socket = IO::Socket::INET-newPeerAddr = $ARGV0,...
Inframail Advantage Server Edition 6.0 <= 6.37 - (SMTP) BoF Exploit
No description provided by source. ===== Start InframailSMTPOverflow.pl ===== Usage: InframailSMTPOverflow.pl ip InframailSMTPOverflow.pl 127.0.0.1 Infradig Systems Inframail Advantage Server Edition 6.0 Version: 6.37 Download: http://www.infradig.com/ use IO::Socket; use strict; my$socket = ; if...
SmartMax MailMax 1.0 SMTP Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2312/info Smartmax MailMax is an email server for Windows 95/98/NT. It is vulnerable to buffer overflow attacks against the SMTP-command processing function. This can be exploited to execute arbitrary commands with the...
Novell GroupWise <= 8.0 Malformed RCPT command Off-by-one Exploit
No description provided by source. !usr/bin/perl -w QUICK AND DIRTY EXPLOIT Off-by-one error in the SMTP daemon in GroupWise Internet Agent GWIA in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a...
GoodTech SMTP Server <= 5.14 Denial of Service Exploit
No description provided by source. ===== Start GoodTechSMTPServerDOS.pl ===== Usage: GoodTechSMTPServerDOS.pl ip GoodTechSMTPServerDOS.pl 127.0.0.1 GoodTech SMTP Server for Windows NT/2000/XP version 5.14 Download: http://www.goodtechsys.com/ use IO::Socket; use strict; my$socket = ; if $socket =...
afterlogic mailsuite pro (vmware appliance) 6.3 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: AfterLogic Mailsuite Pro VMware Appliance Version: 6.3 Vendor Site: http://www.afterlogic.com/ Software Download: http://www.afterlogic.com/download/ Timeline: 29 May 2012: Vulnerability...
DeepOfix SMTP Server 3.3 - Authentication Bypass
No description provided by source. ====================================================================================== Vulnerability: Bypass authentication and gain unauthorized access to SMTP server ====================================================================================== Platfor...
alt-n mdaemon free 12.5.4 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012:...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)
No description provided by source. source: http://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP mail from command, the POP3 user command and the IMAP login command. T...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)
No description provided by source. source: http://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP mail from command, the POP3 user command and the IMAP login command. T...
Sendmail 8.12.x Header Processing Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers. Reportedly, this...
Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow
No description provided by source. $Id: mercurycrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
AnalogX Proxy 4.0 4 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1504/info AnalogX Proxy is a simple proxy server that allows a user to connect a network of computers to the internet through the proxy gateway. Many of the services provided contain buffer overrun vulnerabilities that ca...
YPOPS 0.6 - Buffer Overflow
No description provided by source. $Id: ypopsoverflow1.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Youngzsoft CMailServer 4.0 RCPT TO Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7548/info A buffer overflow vulnerability has been reported for CMailServer. The vulnerability exists due to insufficient bounds checking when parsing e-mail headers. Specifically, an overly long RCPT TO e-mail header wil...
Horde IMP 2.2.x/3.2.x/4.0.x Email Attachments HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15730/info Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...