Lucene search
K

13 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/04 5:41 a.m.3 views

CVE-2026-43859

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

3.7CVSS5.8AI score0.00041EPSS
Exploits0References2
CVE
CVE
added 2026/05/04 5:41 a.m.9 views

CVE-2026-43859

Mutt vulnerability CVE-2026-43859 affects mutt before 2.3.2, where IMAP auth_cram MD5 digest computation may use strfcpy instead of memcpy. Root cause is choosing the wrong string copy function in the digest pathway. Impact (per CVSS 3.1) is Confidentiality: None, Integrity: Low, Availability: No...

3.7CVSS5.8AI score0.00041EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2000-0300

Malware in sbrugna...

5CVSS6.4AI score0.01554EPSS
Exploits0References4
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow

No description provided by source. $Id: mercurycrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

7.1AI score
Exploits0
Metasploit
Metasploit
added 2007/11/07 6:42 p.m.30 views

Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow

This module exploits a stack buffer overflow in Mercury Mail Transport System 4.51. By sending a specially crafted argument to the AUTH CRAM-MD5 command, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

7.5CVSS1.1AI score0.83914EPSS
Exploits8
Saint
Saint
added 2007/10/05 12:0 a.m.27 views

Mercury Mail SMTP AUTH CRAM-MD5 buffer overflow

Added: 10/05/2007 CVE: CVE-2007-4440 BID: 25357 OSVDB: 39669 Background Mercury Mail Transport System is an e-mail server product for Windows and NetWare. Problem A buffer overflow vulnerability in the SMTP service allows remote attackers to execute arbitrary commands by sending a specially craft...

7.5CVSS7.8AI score0.83914EPSS
Exploits8
Prion
Prion
added 2007/08/21 12:17 a.m.15 views

Stack overflow

Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961...

7.5CVSS8.2AI score0.83914EPSS
Exploits9References9Affected Software1
Cvelist
Cvelist
added 2007/08/21 12:0 a.m.18 views

CVE-2007-4440

Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961...

7.8AI score0.83914EPSS
Exploits8References9
CVE
CVE
added 2007/08/21 12:0 a.m.62 views

CVE-2007-4440

CVE-2007-4440 describes a stack-based buffer overflow in the MercuryS SMTP server of the Mercury Mail Transport System (likely version ≤ 4.51). The vulnerability occurs when processing an SMTP AUTH CRAM-MD5 string, enabling a remote attacker to potentially execute arbitrary code with the privileg...

7.5CVSS7.8AI score0.83914EPSS
Exploits8References9Affected Software1
Symantec
Symantec
added 2007/08/18 12:0 a.m.17 views

Mercury Mail Transport System AUTH CRAM-MD5 Buffer Overflow Vulnerability

Description Mercury Mail Transport System is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks when handling AUTH CRAM-MD5 requests. Attackers can exploit this issue to execute arbitrary code with the privileges of the user running th...

8.2AI score
Exploits0References3Affected Software1
CVE
CVE
added 2000/10/13 4:0 a.m.52 views

CVE-2000-0301

CVE-2000-0301 affects Ipswitch IMAIL server 6.02 and earlier. The issue enables remote attackers to cause a denial of service by sending the AUTH CRAM-MD5 command, impacting availability. The record lists a network-exposed attack with no authentication and a partial availability impact (CVSS v2 b...

5CVSS7AI score0.01554EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2000/10/13 4:0 a.m.13 views

CVE-2000-0301

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...

6.7AI score0.01554EPSS
Exploits0References3
NVD
NVD
added 2000/04/06 4:0 a.m.8 views

CVE-2000-0301

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...

5CVSS6.7AI score0.01554EPSS
Exploits0References3
Rows per page
Query Builder