postcast-overflow.txt

'open calc.exe scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%...

Postcast Server Pro 3.0.61 / Quiksoft EasyMail - 'emsmtp.dll 6.0.1' Remote Buffer Overflow

'open calc.exe scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42...

Buffer overflow

Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service application crash and execute arbitrary code via a long argument to the 1 NLST or 2 APPE commands, as demonstrated by the Infigo FTPStress Fuzzer...

CVE-2006-2180: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service application crash and execute arbitrary code via a long argument to the 1 NLST or 2 APPE commands, as demonstrated by the Infigo FTPStress Fuzzer...

Golden FTP Server Pro Multiple Command Remote Overflow DoS

The remote host appears to be using Golden FTP Server, a personal FTP server for Windows. The version of Golden FTP Server installed on the remote host contains a buffer overflow vulnerability that can be exploited by an authenticated, possibly anonymous, user with a specially crafted NLST comman...

CVE-2006-0978: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the View Headers aka viewheaders functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the Subject header, 2 the From header, and 3 certain other unspecified headers...

CVE-2006-0929

Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. dot dot in the RENAME command...

CVE-2006-0930

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...

CVE-2006-0928

The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the DUMP command, which reveals the operating system, registered user, and registration code...

CVE-2006-0929

CVE-2006-0929 affects the IMAP server of ArGoSoft Mail Server Pro 1.8.8.1. The issue is a directory traversal in the IMAP RENAME command where mailbox names are not filtered for "..", allowing an authenticated remote attacker to create/move folders arbitrarily on the affected system. The connecte...

CVE-2006-0929

Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. dot dot in the RENAME command...

CVE-2006-0928

The CVE-2006-0928 issue affects ArGoSoft Mail Server Pro 1.8, where the POP3 server exposes a _DUMP command that unauthenticated remote users can use to disclose sensitive information (OS, registered user, and registration code). The NVD entry records a base score of 5.0 (Medium) with network acc...

CVE-2006-0930

Summary: CVE-2006-0930 describes a directory traversal vulnerability in Webmail of ArGoSoft Mail Server Pro 1.8. Affected component: Webmail/UIDL handling. Root cause: improper handling of the UIDL parameter allowing directory traversal via “..” sequences, enabling a remote authenticated user to ...

Secunia Research: ArGoSoft Mail Server Pro viewheaders Script Insertion

====================================================================== Secunia Research 27/02/2006 - ArGoSoft Mail Server Pro viewheaders Script Insertion - ====================================================================== Table of Contents Affected...

ArGoSoft Mail Server Pro Webmail viewheaders Multiple Field XSS

The remote host is running ArGoSoft Mail Server Pro, a messaging system for Windows. According to its banner, the webmail server bundled with the version of ArGoSoft Mail Server Pro installed on the remote host fails to properly filter message headers before displaying them as part of a message t...

CVE-2006-0930: Undefined Security Weakness

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...

CVE-2006-0929: Undefined Security Weakness

Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. dot dot in the RENAME command...

CVE-2006-0928: Undefined Security Weakness

The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the DUMP command, which reveals the operating system, registered user, and registration code...

NSAG-200-24.02.2006.txt

Advisory: NSAG-¹200-24.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: ArGoSoft Mail Server Pro 1.8 IMAP Site of manufacturer: www.argosoft.com The status: 19/11/2005 - Publication is postponed...

NSA Group Security Advisory NSAG-№198-23.02.2006 Vulnerability ArGoSoft Mail Server Pro

Advisory: NSAG-№201-24.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: ArGoSoft Mail Server Pro 1.8 POP Site of manufacturer: www.argosoft.com The status: 19/11/2005 - Publication is postponed...