MERCUR WebView WebMail Server mail_user Parameter DoS

The remote WebView service does not do proper bounds checking when processing the following request : GET /mmain.html&mailuser=aaa...aaa A remote attacker could exploit this to crash the service, or potentially execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

A-V Tronics InetServ 3.0 - WebMail GET

/ source: https://www.securityfocus.com/bid/949/info InetServ is a freeware mail server for 32 bit Windows systems. One of the features of this program is webmail, which allows mail to be read from any browser. There is an unchecked buffer in the code that parses the GET requests, and a request o...

A-V Tronics InetServ 3.0 - WebMail GET

A-V Tronics InetServ 3.0 - WebMail GET / source: https://www.securityfocus.com/bid/949/info InetServ is a freeware mail server for 32 bit Windows systems. One of the features of this program is webmail, which allows mail to be read from any browser. There is an unchecked buffer in the code that...

bigfoot-bellsouth-webmail.txt

Date: Fri, 8 Jan 1999 07:07:20 -0600 From: "Madere, Russel" To: [email protected] Subject: Bigfoot/Bellsouth Webmail bug I seem to have found another "bug" with the Bigfoot/Bellsouth Webmail. Users can log back into the service from cached pages. This is a huge security hole, especially for...