Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS

No description provided by source. !/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = '\x41' 30...

surgemail-dos.txt

!/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = '\x41' 3000 s.connect'192.168.0.103',143...

Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)

Surgemail 39e-1 - Authenticated IMAP Remote Buffer Overflow Denial of Service PoC !/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s =...

SurgeMail IMAP Service APPEND Command Remote DoS

According to its banner, the remote host is running a version of the SurgeMail Mail Server older than 3.9g2. The IMAP service in such versions is reportedly affected by remote denial of service vulnerabilities when handling an APPEND command with a large parameter. An authenticated attacker can...

Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)

!/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = '\x41' 3000 s.connect'192.168.0.103',143...

Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS

Exploit for unknown platform in category dos / poc ========================================================= Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS ========================================================= !/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer...

CVE-2008-2859

Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service daemon crash via unknown vectors related to an "imap command."...

CVE-2008-2859

NetWin SurgeMail IMAP service prior to 3.9g2 is affected by an unspecified vulnerability described as CVE-2008-2859 that allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an “imap command.” The NVD entry lists this as a MEDIUM-severity issue (CVSSv...

CVE-2008-2859

Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service daemon crash via unknown vectors related to an "imap command."...

SurgeMail IMAP处理拒绝服务漏洞

BUGTRAQ ID: CNCAN ID：CNCAN-2008062318 SurgeMail是一款邮件服务程序。 SurgeMail处理IMAP命令存在一个未明错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 SurgeMail 3.x 可联系供应商升级到Surgemail 3.9g2: http://www.netwinsite.com/surgemail/...

CVE-2008-1498

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command...

Stack overflow

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command...

Stack overflow

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...

CVE-2008-1497

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...

CVE-2008-1498

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command...

CVE-2008-1498

CVE-2008-1498 is a stack-based buffer overflow in the IMAP LIST command of NetWin Surgemail, affecting 3.8k4-4 and earlier. Remote authenticated users could execute arbitrary code via a long first argument to LIST. Exploitation is documented (see Exploit-DB link in references). No patch/version o...

CVE-2008-1497

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...

CVE-2008-1497

CVE-2008-1497 and related CVEs describe a stack-based buffer overflow in NetWin Surgemail IMAP service. CVE-2008-1497 affects SurgeMail 38k4-4 and earlier, allowing remote authenticated users to execute arbitrary code via long arguments to the LSUB command. Related entries (CVE-2008-7182 and CVE-...

SurgeMail IMAP服务LSUB命令远程栈溢出漏洞

BUGTRAQ ID: 28377 SurgeMail是下一代的邮件服务器，可运行在Windows NT/2K或UNIX平台上，支持所有的标准IMAP、POP3、SMTP、SSL和ESMTP协议。 Surgemail的IMAP服务中存在栈溢出漏洞，如果远程攻击者向该服务发送了带有超长参数的LSUB命令的话，就可以触发这个溢出，导致执行任意指令。 NetWin SurgeMail 3.8k4-4 - Microsoft Windows XP SP2 NetWin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://netwinsite.com/...

INFIGO-2008-03-07.txt

INFIGO IS Security Advisory ADV-2008-03-07 http://www.infigo.hr/en/ Title: Surgemail 38k4 IMAP server remote stack overflow Advisory ID: INFIGO-2008-03-07 Date: 2008-03-21 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2008-03-07 Impact: Remote code execution Risk Level: High...