CVE-2017-12628

The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can only be used for privilege escalation...

CVE-2017-12628

CVE-2017-12628 : The JMX server embedded in Apache James is vulnerable to a Java deserialization issue in its JMX handling, enabling arbitrary command execution. The description notes this is limited to local escalation since JMX is bound to localhost by default, with the vendor upgrade to a fixe...

Unauthorized Content Type Overwriting

Apache James Mailbox API is vulnerable to unauthorized content type overwriting. The vulnerability exists because the application does not link the AttachmentId with the content type in mailbox...

CVE-2015-7611

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors...

Design/Logic Flaw

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors...

CVE-2015-7611

Apache James Server 2.3.2 with file-based user repositories is affected by CVE-2015-7611, a command-injection vulnerability that allows remote attackers to execute arbitrary system commands via insecure user-creation handling. The root cause is insufficient input validation during user creation, ...

CVE-2015-7611

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors...

Apache James Server Command Execution Vulnerability

Apache James Server is the United States Apache Apache Software Foundation of a pure Java technology development of open source SMTP and POP3 mail server and NNTP news server. A command execution vulnerability exists in Apache James Server version 2.3.2. A remote attacker could exploit this...

Apache James Server 2.3.2 security vulnerability fixed

Severity: Important Vendor: The Apache Software Foundation Versions Affected: James Server 2.3.2 Description: Apache James Server 2.3.2 has security issue that can let a user execute arbitrary system command for servers configured with file based user repositories. Mitigation: 2.3.2 users should...

FreeBSD : james -- multiple vulnerabilities (be3069c9-67e7-11e5-9909-002590263bf5)

The Apache James Project reports : This release has many enhancements and bug fixes over the previous release. See the Release Notes for a detailed list of changes. Some of the earlier defects could turn a James mail server into an Open Relay and allow files to be written on disk. All users of...

james -- multiple vulnerabilities

The Apache James Project reports: This release has many enhancements and bug fixes over the previous release. See the Release Notes for a detailed list of changes. Some of the earlier defects could turn a James mail server into an Open Relay and allow files to be written on disk. All users of Jam...

Apache James Server 2.3.2 - Remote Command Execution

Exploit Title: Apache James Server 2.3.2 Authenticated User Remote Command Execution Date: 16\10\2014 Vendor Homepage: http://james.apache.org/server/ Software Link: http://ftp.ps.pl/pub/apache/james/server/apache-james-2.3.2.zip 版本: Apache James Server 2.3.2 Tested on: Ubuntu, Debian...

Apache-James-Server-2.3.2

Software Link: http://ftp.ps.pl/pub/apache/james/server/apache-james-2.3.2.zip Version: Apache James Server 2.3.2 Tested on: Ubuntu, Debian Info: This exploit works on default installation of Apache James Server 2.3.2 Info: Example paths that will automatically execute payload on some action:...

Apache James Server 2.3.2 - Remote Command Execution

Apache James Server 2.3.2 - Remote Command Execution !/usr/bin/python Exploit Title: Apache James Server 2.3.2 Authenticated User Remote Command Execution Date: 16\10\2014 Exploit Author: Jakub Palaczynski, Marcin Woloszyn, Maciej Grabiec Vendor Homepage: http://james.apache.org/server/ Software...

Apache James Server 2.3.2 - Remote Command Execution

!/usr/bin/python Exploit Title: Apache James Server 2.3.2 Authenticated User Remote Command Execution Date: 16\10\2014 Exploit Author: Jakub Palaczynski, Marcin Woloszyn, Maciej Grabiec Vendor Homepage: http://james.apache.org/server/ Software Link:...

Apache James 2.2 SMTP Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18138/info Apache James is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed SMTP commands. This issue allows remote attackers to consume...

CVE-2006-2806

The SMTP server in Apache Java Mail Enterprise Server aka Apache James 2.2.0 allows remote attackers to cause a denial of service CPU consumption via a long argument to the MAIL command...

CVE-2006-2806

CVE-2006-2806: The SMTP server in Apache Java Mail Enterprise Server (Apache James) 2.2.0 is vulnerable to a denial-of-service via a long argument to the MAIL command, consuming CPU. No exploitation or remediation details are provided in the connected documents.

Apache James Server 2.2 - SMTP Denial of Service

Apache James Server 2.2 - SMTP Denial of Service source: https://www.securityfocus.com/bid/18138/info Apache James is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed SMTP commands. This issue allows remote attackers...

JAMES2.2.0.txt

--------------------------------------------------------------------------- ECHOADV31$2006 JAMES 2.2.0 -- Denial Of Service --------------------------------------------------------------------------- Author : y3dips a.k.a Ahmad Muammar W.K Date : April, 27th 2006 Location : Indonesia, Jakarta Web...