120 matches found
CVE-2000-0716
CVE-2000-0716 affects WorldClient email client in MDaemon 2.8. The session ID is included in the referer header of an HTTP request when the user clicks a URL, allowing the visited site to hijack the session ID and read the user’s email. Exploitation details are not provided in the documents, and ...
CVE-2000-0716
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...
CVE-2000-1020
Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL...
CVE-2000-1020
Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL...
CVE-2000-1020
CVE-2000-1020 describes a heap overflow in Worldclient of MDaemon (versions 3.1.1 and earlier) that can be triggered by a long URL, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands. The issue is exploitable over the network without authentication, ...
CVE-2000-0716
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...
CVE-2000-0660
CVE-2000-0660 affects the WDaemon web server for WorldClient 2.1, allowing remote attackers to read arbitrary files through a directory-traversal (..). The underlying issue is improper handling of path components, enabling unauthorized file access. Exploitation details are not provided in the CVE...
CVE-2000-0660
The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. dot dot attack...
Дырка в WorldClient
Используя обратный путь в директориях можно загрузить любой файл...
Infosec.20000712.worldclient.2.1
Infosec Security Vulnerability Report No: Infosec.20000712.worldclient.2.1 Vulnerability Summary --------------------- Problem: The web server for remote access to e-mail in WorldClient 2.1 is vulnerable for root dot dot. It is possible to read and in some cases download any file known by name an...
CVE-2000-0660
The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. dot dot attack...
alt-n WorldClient standard 2.1 - Directory Traversal
source: https://www.securityfocus.com/bid/1462/info The HTTP interface for WorldClient 2.1 is vulnerable to a directory traversal. By requesting a URL composed of the filename and ..\ it is possible for a remote user to retrieve and dowload any file of known location. Example:...
alt-n WorldClient standard 2.1 - Directory Traversal
alt-n WorldClient standard 2.1 - Directory Traversal source: https://www.securityfocus.com/bid/1462/info The HTTP interface for WorldClient 2.1 is vulnerable to a directory traversal. By requesting a URL composed of the filename and ..\ it is possible for a remote user to retrieve and dowload any...
CVE-1999-0844
CVE-1999-0844 maps to a DoS in MDaemon WorldClient and WebConfig services caused by an overflow when handling excessively long URLs. Nessus entries MDAEMON_WEBCONFIG.NASL and MDAEMON_WORLDCLIENT.NASL describe remote attackers sending abnormally long GET requests (e.g., GET /aaaaa[... ]aaa HTTP/1....
CVE-1999-0844
Denial of service in MDaemon WorldClient and WebConfig services via a long URL...
Alt-N WorldClient Pro 2.0.0.0/2.0.1.0/Standard 2.0.0.0 - Long URL Denial of Service
source: https://www.securityfocus.com/bid/823/info Alt-N's WorldClient is an email webserver that allows it's users to retrieve email via HTTP. It is susceptible to denial of service attacks due to an unchecked buffer in the request handler. Supplying a long url will crash the server. http...
worldclient.2.0.0.0.dos.txt
Remote DoS Attack in WorldClient Server v2.0.0.0 Vulnerability PROBLEM: UssrLabs found a buffer overflow in WorldClient Server v2.0.0.0 where they do not use proper bounds checking. The following all result in a Denial of Service against the service in question. affected services: WorldClient: Po...
CVE-1999-0844
Denial of service in MDaemon WorldClient and WebConfig services via a long URL...
MDaemon WorldClient HTTP Server URL Overflow DoS
It was possible to crash the remote WorldClient web server which allows users to read their mail remotely by sending : GET /aaaaa...aaa HTTP/1.0 This issue allows a remote attacker to prevent users from reading their email. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
mdaemon.2.8.5.0.txt
Multiples Remotes DoS Attacks in MDaemon Server v2.8.5.0 Vulnerability PROBLEM: UssrLabs found multiple places in MDaemon v2.8.5.0 where they do not use proper bounds checking. The following all result in a Denial of Service against the service in question. affected services: WorldClient: Port 20...