Дырка в MailForm (Credit Card)

Не проверяется запрос пользователя, что позволяет получить любой файл с сервера, прикрепив его к письму...

Vulnerability Report On IPSWITCH's IMail

Vulnerability Report On IPSWITCH's IMail Date Published: August 30 2000 Advisory ID: TS003 Bugtraq ID: http://www.securityfocus.com/bid/1617 CVE CAN: None at this time Title: IPSWITCH IMail File Attachment Vulnerability Class: Access Validation Error Remotely Exploitable: Yes Locally Exploitable:...

Дырка в Stalker CGI Mail

Макро $File$ и $Attach$ позволяют прикрепить к письму любой файл...

Очередная дырка в IMAIL

Используя Web-интерефейс можно прикрепить локальный файл с сервера к письму пользователя...

Ipswitch IMail 6.x - File Attachment

Ipswitch IMail 6.x - File Attachment source: https://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383...

Microsoft Outlook 97982000 Outlook Express 4.05.0 - GMT Field Buffer Overflow (2)

Microsoft Outlook 97982000 Outlook Express 4.05.0 - GMT Field Buffer Overflow 2 source: https://www.securityfocus.com/bid/1481/info All versions of Microsoft Outlook and Outlook Express are vulnerable to buffer overflow attacks where a remote user is capable of executing arbitrary code on an emai...

The MDMA Crew's GateKeeper Exploit

I covered a flaw in Gatekeeper 3.5 about a month ago. Well, Gatekeeper 3.6 is out now, and I'm assuming it's fixed, so it's safe to release some exploit code. Find the Java src and the bytecode attached. Cheers, Wizdumb...

CVE-2000-0342

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."...

CVE-2000-0428

Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment...

CVE-2000-0428

CVE-2000-0428 : Buffer overflow in the SMTP gateway of InterScan Virus Wall versions 3.32 and earlier allows remote command execution via a long filename in a uuencoded attachment. Impact is consistent with a HIGH severity (CVSS 2.0: AV:N/AC:L/Au:N/C:C/I:C/A:C). No remediation details are provide...

CVE-2000-0342: Improper Link Resolution Before File Access

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."...

CVE-2000-0428: Undefined Security Weakness

Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment...

CVE-2000-0415

Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name...

CVE-2000-0329

A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability...

Переполнение кучи в kmail

Длинное имя прикрепленного файла приводит к переполнению динамической памяти, что может быть использовано как DoS атака...

Kmail heap overflow

Hi When a letter sent to a kmail user has an attachment with long about 250 bytes long filename, kmail 1.0.28 segfaults. EIP does NOT get overwritten, only EAX. Dear gurus, is it exploitable? : Byez -- Lez [email protected] http://w3.swi.hu/lezli...

CVE-2000-0415

Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name...

CVE-2000-0428

Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment...

CVE-2000-0342

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."...

PT-2000-1308 · Qualcomm · Eudora

Name of the Vulnerable Software and Affected Versions: Eudora versions 4.x Description: The issue allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment. This is also known as "Stealth...