CVE-2010-3201

Cross-site scripting XSS vulnerability in NetWin Surgemail before 4.3g allows remote attackers to inject arbitrary web script or HTML via the usernameex parameter to the surgeweb program...

CVE-2010-3201

The CVE-2010-3201 entry concerns NetWin Surgemail (SurgeMail) SurgeWeb Cross‑Site Scripting (XSS) via the username_ex parameter. The vulnerability is described as a remote XSS that allows an attacker to inject arbitrary script/HTML in the SurgeWeb login page, potentially stealing cookies or hijac...

SurgeMail < 4.3g XSS Vulnerability

SurgeMail is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

NetWin Surgemail XSS vulnerability

Application NetWin Surgemail 4.3e Vendor NetWin - http://netwinsite.com Discovered by Kerem Kocaer [email protected] Problem ------- Cross-site scripting XSS vulnerability in the Surgemail webmail login page /surgemail allows remote attackers to inject arbitrary web script or HTML. Input...

SurgeMail SurgeWeb Cross Site Scripting Vulnerability

SurgeMail is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

SurgeMail surgeweb XSS

The remote web server hosts a CGI script that fails to adequately sanitize request strings with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected site...

Surgemail SurgeWeb 4.3e - Cross-Site Scripting

source: https://www.securityfocus.com/bid/43679/info SurgeMail is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Surgemail SurgeWeb 4.3e - Cross-Site Scripting

Surgemail SurgeWeb 4.3e - Cross-Site Scripting source: https://www.securityfocus.com/bid/43679/info SurgeMail is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

NetWin Surgemail 4.3e Cross Site Scripting

Application NetWin Surgemail 4.3e Vendor NetWin - http://netwinsite.com Discovered by Kerem Kocaer Problem ------- Cross-site scripting XSS vulnerability in the Surgemail webmail login page /surgemail allows remote attackers to inject arbitrary web script or HTML. Input passed to the "usernameex"...

SurgeMail < 3.9g2 Buffer Overflow Vulnerability

SurgeMail is prone to a buffer overflow vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

SurgeMail Detection Consolidation

Consolidation of SurgeMail detections. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute i...

SurgeMail 'APPEND' Command Buffer Overflow Vulnerability

This host is running SurgeMail and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodsurgemailappendcmdbofvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ SurgeMail 'APPEND' Command Buffer Overflow Vulnerability Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

CVE-2008-7182

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

Buffer overflow

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

CVE-2008-7182

SurgeMail IMAP Service APPEND command Buffer Overflow (CVE-2008-7182) affects NetWin Surgemail 3.9e and possibly earlier versions up to 3.9g2. Affected component is the IMAP service; root cause is a buffer overflow triggered by a long first argument to the APPEND command. Impact stated: remote au...

CVE-2008-7182

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...

SurgeMail IMAP服务APPEND命令远程溢出漏洞

BUGTRAQ ID: 30000 SurgeMail是下一代的邮件服务器，可运行在Windows NT/2K或UNIX平台上，支持所有的标准IMAP、POP3、SMTP、SSL和ESMTP协议。 SurgeMail的IMAP服务器存在缓冲区溢出漏洞，如果远程攻击者向IMAP服务提交了带有超长参数的APPEND命令的话，就可以触发这个溢出，导致服务器崩溃。 NetWin SurgeMail 3.9e NetWin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://netwinsite.com/ A01 LOGIN username...

[AJECT] SurgeMail IMAP 3.9e vulnerability

---------------------------------------- Synopsis ---------------------------------------- SurgeMail Mail Server 3.9e Windows and Unix-based versions is vulnerable to denial-of-service DoS attacks. The nature of the crash may indicate a buffer overflow problem, but the developers claimed otherwis...

Surgemail IMAP server DoS

Crash on APPEND command processing...

SurgeMail IMAP Service 'APPEND'命令远程缓冲区溢出漏洞

BUGTRAQ ID: 30000 CNCAN ID：CNCAN-2008070103 Surgemail是一款邮件服务程序。 Surgemail处理'APPEND'命令存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 提交超长字符串作为'APPEND'命令，可触发IMAP服务崩溃，造成缓冲区溢出，可能以应用程序权限执行任意指令。 NetWin SurgeMail 3.9e 目前没有详细解决方案提供： http://www.rss-aggregator.com/ http://www.sebug.net/exploit/3999...