CVE-2008-2831

The CVE-2008-2831 issue affects MailMarshal SMTP’s Spam Quarantine Management (SQM) web component. In versions 6.0.3.8–6.3.0.0, two XSS vectors exist in the delegated spam management UI: via the list of blocked senders and via the list of safe senders. The vulnerability allows user‑assisted remot...

CVE-2008-2831

Multiple cross-site scripting XSS vulnerabilities in the delegated spam management feature in the Spam Quarantine Management SQM component in MailMarshal SMTP 6.0.3.8 through 6.3.0.0 allow user-assisted remote authenticated users to inject arbitrary web script or HTML via 1 the list of blocked...

CVE-2008-2831: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the delegated spam management feature in the Spam Quarantine Management SQM component in MailMarshal SMTP 6.0.3.8 through 6.3.0.0 allow user-assisted remote authenticated users to inject arbitrary web script or HTML via 1 the list of blocked...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

plesk-auth.txt

Hello, the reported vulnerability allows logins to mail and probably other services protected by plesk authentication modules on at least the current Plesk 8.6.0 Unix/Linux and could eg. be used for relaying spam through gained smtp auth priviledges. Only systems which allow short mail login name...

Plesk 8.6.0 authentication flaw allows to gain virtual user priviledges

Hello, the reported vulnerability allows logins to mail and probably other services protected by plesk authentication modules on at least the current Plesk 8.6.0 Unix/Linux and could eg. be used for relaying spam through gained smtp auth priviledges. Only systems which allow short mail login name...

QK SMTP Server

The remote SMTP server is prone to a stack based overflow. Description : QK SMTP Server is installed on the remote host. The application does not properly check it's boundaries for user supplied input in the 'RCPT TO' field. This results in a stack based overflow, where it's possible to crash the...

QK SMTP Server 'RCPT TO' buffer overflow vulnerability

QK SMTP Server is installed on the remote host which is prone to a stack based overflow. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CentOS 3 / 4 / 5 : postfix (CESA-2008:0839)

Updated postfix packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and TLS. A fl...

Moderate: Red Hat Security Advisory: postfix security update

Updated postfix packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, and TLS. A fl...

Sql injection

Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors...

CVE-2008-3335

Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors...

CVE-2008-3335

Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors...

CVE-2008-3335

PunBB prior to version 1.2.19 contains an unspecified vulnerability that allows remote attackers to inject arbitrary SMTP commands via unknown vectors. The issue is rated high severity (CVSSv2 base score 10.0) with network attack requirements and full impact on confidentiality, integrity, and ava...

CVE-2008-3335: Improper Control of Generation of Code

Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors...

Microsoft Malware Protection Engine TWO DoS Vulnerabilities

CVE-2008-1437 CVE-2008-1438 There are two vulnerabilities idenitified in Microsoft Antivirus product. These vulnerabilities can be exploited to cause Denial of service. 1. CVE-2008-1437 PE Parsing Memory Corruption While scanning a specially crafted PE file, Malware orotection engine...

Inframail Advantage Server Edition 6.0 <= 6.37 (SMTP) BoF Exploit

No description provided by source. ===== Start InframailSMTPOverflow.pl ===== Usage: InframailSMTPOverflow.pl ip InframailSMTPOverflow.pl 127.0.0.1 Infradig Systems Inframail Advantage Server Edition 6.0 Version: 6.37 Download: http://www.infradig.com/ use IO::Socket; use strict; my$socket = ""; ...

[SECURITY] Fedora 8 Update: fetchmail-6.3.8-4.fc8

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...