4294 matches found
[SA15038] netMailshar Professional Two Vulnerabilities
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: netMailshar Professional Two Vulnerabilities SECUNIA...
CVE-2005-1138
Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service CPU consumption via certain e-mail messages...
[SA14943] Kerio MailServer Unspecified WebMail Email Viewing Denial of Service
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Kerio MailServer Unspecified WebMail Email Viewing...
CVE-2005-1138
CVE-2005-1138 refers to an unknown vulnerability in the WebMail component of Kerio MailServer prior to 6.0.9 that can cause a denial of service via certain e‑mail messages. Multiple sources (NVD, CVE List, and Nessus plugin) describe it as a resource exhaustion/CPU consumption issue when malforme...
CVE-2005-1138
Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service CPU consumption via certain e-mail messages...
Cross-site Scripting through global scope pollution — Mozilla
As you browse from site to site each new page should start with a clean slate. shutdown reports a technique that pollutes the global scope of a window in a way that persists from page to page. A malicious script could define a setter function for a variable known to be used by a popular site, and...
Kerio MailServer Webmail Malformed Email Handling Resource Exhaustion DoS
According to its banner, the remote host is running a version of Kerio MailServer prior to 6.0.9. Such versions may be subject to hangs or high CPU usage when malformed email messages are viewed through its WebMail component. An attacker may be able leverage this issue to deny service to legitima...
CVE-2005-0845
CVE-2005-0845 concerns SurgeMail 2.2g3, where a directory traversal in the Webmail interface, via the attach_id parameter, permits remote authenticated users to write arbitrary files or directories. The underlying issue is improper validation of the dot-dot (.. ) path segment, enabling access out...
CVE-2005-0845
Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. dot dot in the attachid parameter...
[SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities
SIG^2 Vulnerability Research Advisory SurgeMail Webmail Attachment Upload and XSS Vulnerabilities by Tan Chew Keong Release Date: 23 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/surgemail22g3.html SUMMARY SurgeMail http://netwinsite.com/surgemail/ is a next generation Mail Server -...
surgemail22g3.txt
SIG^2 Vulnerability Research Advisory SurgeMail Webmail Attachment Upload and XSS Vulnerabilities by Tan Chew Keong Release Date: 23 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/surgemail22g3.html SUMMARY SurgeMail http://netwinsite.com/surgemail/ is a next generation Mail Server -...
[NT] Magic Winmail Server's Multiple Vulnerabilities
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
[SECURITY] [DSA 662-2] New squirrelmail package fixes regression
-------------------------------------------------------------------------- Debian Security Advisory DSA 662-2 [email protected] http://www.debian.org/security/ Martin Schulze March 14th, 2005 http://www.debian.org/security/faq -...
CVE-2004-1719
Merak Webmail Server 5.2.7 (and Merak Webmail/IceWarp Web Mail
CVE-2004-1719
Multiple cross-site scripting XSS vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the 1 category, 2 cserver, 3 ext, 4 global, 5 showgroups, 6 or showlite parameters to address.html, or the 7 spage or 8 autoresponder parameters to...
CVE-2004-1501
The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service CPU and memory consumption by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data...
CVE-2004-1501
The CVE-2004-1501 entry concerns the webmail service in Lan Suite 602, versions up to 2004.0.04.0909 and earlier. The vulnerability allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value and then disconnecting ...
Open WebMail openwebmail.pl logindomain Parameter XSS
The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the 'logindomain' parameter. This failure enables an attacker to run arbitrary script code in the context of a user's web browser. %NASLMINLEVEL 70300 This script was writte...
security flaw
PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code...