CVE-2008-1854

Unspecified vulnerability in SmarterMail Web Server SMWebSvr.exe in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service service termination via a long HTTP 1 GET, 2 HEAD, 3 PUT, 4 POST, or 5 TRACE request. NOTE: the provenance of this information is unknown; the details are...

Cross site request forgery (csrf)

Unspecified vulnerability in SmarterMail Web Server SMWebSvr.exe in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service service termination via a long HTTP 1 GET, 2 HEAD, 3 PUT, 4 POST, or 5 TRACE request. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1854

Unspecified vulnerability in SmarterMail Web Server SMWebSvr.exe in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service service termination via a long HTTP 1 GET, 2 HEAD, 3 PUT, 4 POST, or 5 TRACE request. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1854

The CVE-2008-1854 entry applies to SmarterMail Web Server (SMWebSvr.exe) in SmarterMail version 5.0.2999, where a denial-of-service (service termination) can be triggered by processing excessively long HTTP requests of several methods (GET, HEAD, PUT, POST, TRACE). The available connected documen...

SmarterMail Subject Field XSS

The remote host is running SmarterMail, an email and collaboration server for Windows. The webmail component of the version of SmarterMail installed on the remote host fails to sanitize the Subject field of messages before using it to generate dynamic HTML output. An unauthenticated attacker may ...

SmarterTools SmarterMail 5.0 - HTTP Request Handling Denial of Service

source: https://www.securityfocus.com/bid/28610/info SmarterTools SmarterMail is prone to a denial-of-service vulnerability when handling specially crafted HTTP GET, HEAD, PUT, POST, and TRACE requests. When the server eventually resets the request connection, it will crash. Remote attackers can...

SmarterTools SmarterMail 5.0 - HTTP Request Handling Denial of Service

SmarterTools SmarterMail 5.0 - HTTP Request Handling Denial of Service source: https://www.securityfocus.com/bid/28610/info SmarterTools SmarterMail is prone to a denial-of-service vulnerability when handling specially crafted HTTP GET, HEAD, PUT, POST, and TRACE requests. When the server...

Cross site scripting

Cross-site scripting XSS vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message...

CVE-2008-0872

Cross-site scripting XSS vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message...

CVE-2008-0872

Cross-site scripting XSS vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message...

CVE-2008-0872

CVE-2008-0872 affects SmarterTools SmarterMail Enterprise 4.3. The issue is a cross-site scripting (XSS) vulnerability in the webmail Subject field where the STYLE attribute can carry arbitrary HTML/Script reflected in the user’s browser. Root cause: inadequate sanitization of the Subject field b...

smartermail-xss.txt

Product: SmarterMail Enterprise 4.3 Web product: http://www.smartertools.com/Products/SmarterMail/O verview.aspx web product demo: http://maildemo.smartertools.com/Login.aspx Apparently this webmail is vulnerable to an attack xss very dangerous because it runs automatically when you open the inbo...

SmarterMail Enterprise 4.3 - malformed mail XSS

Product: SmarterMail Enterprise 4.3 Web product: http://www.smartertools.com/Products/SmarterMail/O verview.aspx web product demo: http://maildemo.smartertools.com/Login.aspx Apparently this webmail is vulnerable to an attack xss very dangerous because it runs automatically when you open the inbo...

SmarterTools SmarterMail 4.3 - Subject HTML Injection

SmarterTools SmarterMail 4.3 - Subject HTML Injection source: https://www.securityfocus.com/bid/27878/info SmarterMail is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the...

CVE-2004-2585

Cross-site scripting XSS vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via Javascript to the "check spelling" feature in the compose area...

CVE-2004-2587

login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, possibly due to a buffer overflow...

CVE-2004-2585

The CVE-2004-2585 entry affects SmarterTools SmarterMail 1.6.1511 and 1.6.1529, where the XSS flaw occurs in frmCompose.aspx, allowing remote attackers to inject arbitrary script/HTML via Javascript in the compose area's “check spelling” feature. The vulnerability arises from how user-supplied in...

CVE-2004-2586

CVE-2004-2586 applies to SmarterTools SmarterMail 1.6.1511 and 1.6.1529, where a directory traversal flaw in frmGetAttachment.aspx allows remote attackers to read arbitrary files via the filename parameter. Root cause: insufficient input validation leading to path traversal. The available sources...

CVE-2004-2586

Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrary files via the filename parameter...

CVE-2004-2583

The CVE-2004-2583 entry describes a denial-of-service condition in SmarterTools SmarterMail (versions 1.6.1511 and 1.6.1529) where remote attackers can cause high CPU usage by opening a large number of simultaneous connections to TCP port 25. The available sources confirm the affected product and...