163 matches found
CVE-2007-4372
Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A...
Information disclosure
Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A...
CVE-2007-4377
CVE-2007-4377 describes a stack-based buffer overflow in the IMAP service of SurgeMail 38k. An authenticated remote attacker can overflow by sending a long argument to the IMAP SEARCH command, potentially leading to arbitrary code execution. Some sources note affected versions older than 3.8k2/3....
CVE-2007-4372
Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A...
CVE-2007-4377
Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372...
CVE-2007-4372
CVE-2007-4372 relates to NetWin SurgeMail 38k on Windows Server 2003 with an unspecified vulnerability and unknown impact/remote vectors per the NVD entry (notes indicate vague advisory origins). Related records also describe CVE-2007-4377 as a separate vulnerability: a stack-based buffer overflo...
SurgeMail 38k (SEARCH) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/python import os import sys import time import socket import struct this is imap exploit 710 bytes, tcp port 9999 bind, borrowed from skape miller inventor of megacanvas sc = "\x90" sc += "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\xeb\x03\x5...
SurgeMail 38k (SEARCH) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ===================================================== SurgeMail 38k SEARCH Remote Buffer Overflow Exploit ===================================================== !/usr/bin/python import os import sys import time import socket import struct th...
Surgemail 38k - 'Search' Remote Buffer Overflow
!/usr/bin/python import os import sys import time import socket import struct this is imap exploit 710 bytes, tcp port 9999 bind, borrowed from skape miller inventor of megacanvas sc = "\x90" sc += "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\xeb\x03\x59" sc +=...
Format string
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution...
CVE-2007-2655
CVE-2007-2655 affects NetWin Webmail 3.1s-1 used in SurgeMail prior to version 3.8i2. The vulnerability is described as a potential format string issue that could enable remote code execution. Details are limited in the provided sources; no concrete exploit method, affected module/file, or patch/...
CVE-2004-2547
NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to obtain sensitive information via HTTP requests that a specify the / URI, b specify the /scripts/ URI, or c specify a non-existent file, which reveal the path in an error message...
CVE-2004-2548
Multiple cross-site scripting XSS vulnerabilities in NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to inject arbitrary web script or HTML via a a URI containing the script, or b the username field in the login form. NOTE: it is possible that the first attack vector is...
CVE-2004-2548
NetWin SurgeMail before 2.0c and NetWin WebMail expose multiple cross-site scripting (XSS) vulnerabilities. Affected inputs: (1) a URI containing the script, and (2) the login form’s username field. The issue may be related to an error-message effect described in CVE-2004-2547. No remediation det...
CVE-2004-2547
NetWin SurgeMail (before 2.0c) and NetWin WebMail expose sensitive information through HTTP error handling. Requests to the root ("/"), to "/scripts/", or to a non-existent file can cause error messages that reveal the server path. This vulnerability is described as an information disclosure affe...
CVE-2004-2537
Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."...
CVE-2004-2537
Technical details (affected product/version, root cause, exploit methods) are not provided in the supplied documents. Monitor for updates.
CVE-2005-1714
CVE-2005-1714: A cross-site scripting (XSS) vulnerability affects NetWin SurgeMail 3.0c2 and earlier. Multiple XSS issues may allow remote attackers to inject arbitrary HTML/JavaScript in users’ browsers, via unknown vectors. Connected sources corroborate the susceptibility for SurgeMail 3.0c2, w...