Xmail: Privilege escalation through sendmail

Background Xmail is an Internet and intranet mail server. Description iDEFENSE reported that the AddressFromAtPtr function in the sendmail program fails to check bounds on arguments passed from other functions, and as a result an exploitable stack overflow condition occurs when specifying the "-t...

Warm Links XSS vuln.

Warm Links XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/warm-links-xss-vuln.html vendor:http://www.mrcgiguy.com/wldetails.shtml affected version:v.1.0.0 and prior Product Description: Directory style index allows for easy navigation Doe...

DSA-902-1 xmail - buffer overflow

Bulletin has no description...

Sendmail Queue Manipulation & Destruction Vulnerability

The remote Sendmail server, according to its version number, might be vulnerable to a queue destruction vulnerability. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sendmail 8.x - 8.10.0 ETRN Command DoS Vulnerability

The remote Sendmail server, according to its version number, allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated...

Sendmail 8.8.8 - 8.9.2 Parsing Redirection DoS Vulnerability

The remote Sendmail server, according to its version number, allows remote attackers cause a denial of service by sending messages with a large number of headers. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Sendmail 8.x < 8.6.7 Long Debug Local Overflow Vulnerability

The remote Sendmail server, according to its version number, allows local users to gain root access via a large value in the debug -d command line option. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Sendmail < 8.10.0 mail.local DoS Vulnerability

mail.local in the remote Sendmail server, according to its version number, does not properly identify the SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Sendmail DEBUG Mode Leak Vulnerability

According to the version number of the remote mail server, a local user may be able to obtain the complete mail configuration and other interesting information about the mail queue. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and...

Sendmail WIZ Command Enabled

The remote Sendmail service accepts the WIZ command. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sendmail:sendmail";...

Sendmail 8.8.x - 8.8.3 Group Permissions Vulnerability

The remote sendmail server, according to its version number, allows local users to write to a file and gain group permissions via a .forward or :include: file. SPDX-FileCopyrightText: 2001 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Sendmail 8.6.x, 8.7.x - 8.7.5 Local Starvation and Overflow Vulnerabilities

The remote Sendmail server, according to its version number, has buffer overflow and denial of service problem through GECOS field, it gives root access to local users. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Sambar sendmail Vulnerability

The Sambar webserver provides a web interface for sending emails. It is possible to simply pass a POST request to /session/sendmail and by this send mails to anyone you want. Due to the fact that Sambar does not check HTTP referrers you do not need direct access to the server...

Sendmail 5.79 - 8.12.7 Remote Header Buffer Overflow Vulnerability

The remote Sendmail server, according to its version number, may be vulnerable to a remote buffer overflow allowing remote users to gain root privileges. SPDX-FileCopyrightText: 2003 SECNAP Network Security Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Sendmail 8.7.x, 8.8.x - 8.8.2 Local Overflow Vulnerability

The remote sendmail server, according to its version number, allows local user to start it in daemon mode and gain root privileges. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sendmail 8.12.0.x Custom Configuration File Vulnerability

The remote Sendmail server, according to its version number, may be vulnerable to a SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sendmail 8.8.8 - 8.12.7 Double Pipe Access Validation Vulnerability

Sendmail is prone to a double pipe access validation vulnerability. SPDX-FileCopyrightText: 2003 StrongHoldNet Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

XMail 1.21 (-t Command Line Option) Local Root Buffer Overflow Exploit

No description provided by source. / XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include stdio.h include stdlib.h include unistd.h include string.h include signal.h include sys/types.h include sys/wait.h include sys/select.h defi...

XMail 1.21 - '-t' Command Line Option Local Buffer Overflow / Local Privilege Escalation

/ XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include include include include include include include include define TARGET "/var/MailRoot/bin/sendmail" define NM "nm" define GREP "grep" define MKDIR "mkdir" define TMP "/tmp"...

XMail 1.21 - -t Command Line Option Local Buffer Overflow Local Privilege Escalation

XMail 1.21 - -t Command Line Option Local Buffer Overflow Local Privilege Escalation / XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include include include include include include include include define TARGET...