CVE-2001-0340

An interaction between the Outlook Web Access OWA service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically...

ZoneAlarm Pro's MailSafe

hi2all MailSafe is a feature on ZoneAlarm Pro http://www.zonelabs.com that identifies in e-mail attachments potentially harmful files ex: .exe, .com, .reg, .vbs or others that can be added in this feature configuration, and renames their extension to .zl; at the same time it can show an alarm box...

CVE-2001-1326

Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to...

CVE-2001-0398

The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon...

Дырка в The Bat! (extention spoofing)

При показе вложенного файла имя файла обрезается, подобрав длину имени можно заставить файл появиться с безобидной картинкой, при запуске не будет выдано предупреждение...

Security Bulletin MS01-020

Title: Incorrect MIME Header Can Cause IE to Execute E-mail Attachment Date: 29 March 2001 Software: Microsoft Internet Explorer Impact: Run code of attacker's choice. Bulletin: MS01-020 Microsoft encourages customers to review the Security Bulletin at:...

Проблема с InoculateIT

InoculateIT для Exchange не будет проверять файлы прикрепленные к письму, если в письме отсутствует RFC-822 заголовок From:, если сообщение содержит только прикрепленный файл, если есть вложенные сообщения или если письмо должно придти в папку отличную от Inbox...

Ipswitch IMail 6.x - File Attachment

source: https://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383 for it's end users to access. Via th...

CVE-2000-0614

The CVE-2000-0614 entry concerns the TNEF program on Linux systems, where remote attackers can overwrite arbitrary files by sending TNEF-encoded compressed attachments that specify absolute paths for decompressed output. The NVD metrics indicate high severity with network attack vector, no authen...

CVE-2000-0342

CVE-2000-0342 (Eudora 4.x) describes a vulnerability where remote attackers can bypass the user warning for executable attachments (.exe, .com, .bat) by using a .lnk file that references the attachment, a.k.a. “Stealth Attachment.” The linked PT-2000-1308 entry confirms the affected software as E...

CVE-2000-0614

Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed output...

PT-2000-1014 · Qualcomm · Eudora

Name of the Vulnerable Software and Affected Versions: Eudora version 4.1 Description: The issue allows remote attackers to perform a denial of service by sending attachments with long file names. Recommendations: For Eudora version 4.1, consider restricting the acceptance of attachments with lon...

CVE-2000-0342

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."...

PT-2000-1308 · Qualcomm · Eudora

Name of the Vulnerable Software and Affected Versions: Eudora versions 4.x Description: The issue allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment. This is also known as "Stealth...

CVE-2000-0033

InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...

winmail305.txt

I found some vulnerabilities if windmail run as a CGI application.tested On WindowsNT 4.0, Windmail 3.05 successfully. WindMail is a 32-bit Windows console program by geocel that gives you command-line e-mail messaging capability. You can download an evaluation copy of WindMail 3.0 at:...

FreeBSD-SA-00:07.mh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:07 Security Advisory FreeBSD, Inc. Topic: mh/nmh/exmh/exmh2 ports allow remote execution of binary code Category: ports Module: mh/nmh/exmh/exmh2 Announced: 2000-03-15...

CVE-1999-0427

Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names...

CVE-2000-0033

InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments...

BTD Studio Zom-Mail 1.0.9 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/761/info In certain versions of the BTD Zom-Mail server there exists a buffer overflow which may be remotely exploitable by malicious users. The problem in question is in the handling of overly past 256 chars long file names for file attachments...