SurgeMail buffer overflow

Buffer overflow in LSUB IMAP command...

Surgemail 3.8 - IMAP LSUB Command Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/28377/info SurgeMail is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary machine code in the conte...

Surgemail 3.8 - IMAP LSUB Command Remote Stack Buffer Overflow

Surgemail 3.8 - IMAP LSUB Command Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/28377/info SurgeMail is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Successfully exploiting this issue may allow...

[Full-disclosure] [INFIGO-2008-03-07]: Surgemail 38k4 IMAP server remote stack overflow

INFIGO IS Security Advisory ADV-2008-03-07 http://www.infigo.hr/en/ Title: Surgemail 38k4 IMAP server remote stack overflow Advisory ID: INFIGO-2008-03-07 Date: 2008-03-21 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2008-03-07 Impact: Remote code execution Risk Level: High...

SurgeMail IMAP服务LIST命令远程栈溢出漏洞

BUGTRAQ ID: 28260 SurgeMail是下一代的邮件服务器，可运行在Windows NT/2K或UNIX平台上，支持所有的标准IMAP、POP3、SMTP、SSL和ESMTP协议。 SurgeMail的IMAP服务处理超长畸形的LIST命令时存在漏洞，远程攻击者可以服务发送带有超长参数的LIST命令触发栈溢出，导致执行任意指令。 NetWin SurgeMail 3.8k4-4 NetWin ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://netwinsite.com/...

NetWin SurgeMail <= 3.8k4-4 IMAP LIST Command Remote Overflow

Binary data 4431.prm...

NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit

No description provided by source. !/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 200...

netwin-list.txt

!/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 2000 SP4 English Windows XP Sp2 Englis...

NetWin Surgemail 3.8k4-4 - IMAP (Authenticated) Remote LIST Universal

NetWin Surgemail 3.8k4-4 - IMAP Authenticated Remote LIST Universal !/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows...

NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit

Exploit for unknown platform in category remote exploits ===================================================================== NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit ===================================================================== !/usr/bin/python NetWin...

NetWin Surgemail 3.8k4-4 - IMAP (Authenticated) Remote LIST Universal

!/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 2000 SP4 English Windows XP Sp2 Englis...

Stack overflow

Stack-based buffer overflow in the libspawnusergetpid function in 1 swatch.exe and 2 surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via an HTTP request with multiple long heade...

Format string

Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in the page parameter...

CVE-2008-1054

Stack-based buffer overflow in the libspawnusergetpid function in 1 swatch.exe and 2 surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via an HTTP request with multiple long heade...

CVE-2008-1055

Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in the page parameter...

CVE-2008-1054

NetWin SurgeMail 38k4 and earlier (including swatch.exe and surgemail.exe; webmail.exe and unspecified CGI executables) are affected by a stack-based buffer overflow in the _lib_spawn_user_getpid function. The overflow is triggered by an HTTP request with multiple long headers, causing an overflo...

CVE-2008-1055

CVE-2008-1055 describes a format string vulnerability in NetWin SurgeMail’s webmail.exe components (versions 38k4 and earlier; beta 39a) and WebMail 3.1s and earlier. The flaw, triggered via the page parameter, can cause a denial of service (daemon crash) and may allow arbitrary code execution by...

CVE-2008-1054

Stack-based buffer overflow in the libspawnusergetpid function in 1 swatch.exe and 2 surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via an HTTP request with multiple long heade...

CVE-2008-1055

Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in the page parameter...

Format string and buffer-overflow in SurgeMail 38k4

Luigi Auriemma Application: SurgeMail Mail Server http://netwinsite.com/surgemail/ Netwin's WebMail http://netwinsite.com/webmail/ Versions: SurgeMail = 38k4 and beta 39a Netwin's WebMail = 3.1s only bug A Platforms: Windows, Linux, FreeBSD, MacOSX and Solaris Bugs: A format string in webmail.exe...