CVE-2005-2931

Ipswitch Collaboration Suite / IMail Server 8.20 (ICS) is affected by a format-string vulnerability in the SMTP server that allows remote attackers to execute arbitrary code via crafted input to the EXPN, MAIL, MAIL FROM, or RCPT TO commands. The issue stems from improper handling of format speci...

CVE-2005-2923

The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to cause a denial of service crash via a long argument to the LIST command, which causes IMail Server to reference invalid memory...

CVE-2005-2923

CVE-2005-2923 affects Ipswitch’s IMail Server IMAP service (IP: Ipswitch Collaboration Suite). The vulnerability lies in the IMAP LIST command handling: when a long LIST argument (~8000 bytes) is processed, the server can reference invalid memory, leading to a crash (DoS). This requires authentic...

EUVD-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

CVE-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities

A directory traversal vulnerability was found in DeskNow webmail file attachment upload feature that may be exploited to upload files to arbitrary locations on the server. A second directory traversal vulnerability exists in the document repository file delete feature. SPDX-FileCopyrightText: 200...

CVE-2005-3454

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by Oracle Vuln 1 OCS01, 2 OCS02, 3 OCS03, and 4 OCS04 for Calendar; 5 OCS05, 6 OCS06, 7 OCS07, 8 OCS08, 9 OCS09, and 10...

CVE-2005-3454

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by Oracle Vuln 1 OCS01, 2 OCS02, 3 OCS03, and 4 OCS04 for Calendar; 5 OCS05, 6 OCS06, 7 OCS07, 8 OCS08, 9 OCS09, and 10...

CVE-2005-3454

Technical details are not publicly available in the provided documents for CVE-2005-3454. No specifics on affected products, impact, or remediation are supplied. Monitor for updates.

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

CVE-2005-1987

CVE-2005-1987 is a remote code execution vulnerability in Microsoft Collaboration Data Objects (CDO) used by CDOSYS/CDOEX on Windows and Exchange. An unchecked buffer triggered by processing a malformed SMTP/email header (e.g., oversized Content-Type) can allow an attacker to execute arbitrary co...

CVE-2005-1987

Buffer overflow in Collaboration Data Objects CDO, as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string...

Microsoft Windows Microsoft Collaboration Data Objects buffer overflow

Buffer overflow on parsing mail messages with Microsoft SMTP service...

Microsoft Security Bulletin MS05-048 Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245)

Microsoft Security Bulletin MS05-048 Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution 907245 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows or Microsoft Exchange Server Impact of...

MS05-048: Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245)

An unchecked buffer condition could allow an attacker to execute arbitrary code on the remote host. To execute this flaw, an attacker would need to send a malformed message via SMTP to the remote host, either by using the SMTP server if Exchange is installed or by sending an email to a user on th...

Microsoft Collaboration Data Objects buffer overflow

Overview A buffer overflow in Microsoft Collaboration Data Objects may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Collaboration Data Objects CDO is a scripting library used to develop applications that handle email. Note that C...

phpGroupWare, eGroupWare: PHP script injection vulnerability

Background phpGroupWare and eGroupWare are web based collaboration software suites. Description The XML-RPC implementations of phpGroupWare and eGroupWare fail to sanitize input sent to the XML-RPC server using the "POST" method. Impact A remote attacker could exploit the XML-RPC vulnerability to...

egroupware100007.txt

GulfTech Security Research April 20th, 2005 Vendor : eGroupware URL : http://www.egroupware.org/ Version : Versions Prior To 1.0.0.007 Risk : Multiple Vulnerabilities Description: eGroupware is a very popular open source web based collaboration software that can be used within an intranet, or...

CVE-2005-1249

The IMAP daemon IMAPD32.EXE in Ipswitch Collaboration Suite ICS allows remote attackers to cause a denial of service CPU consumption via an LSUB command with a large number of null characters, which causes an infinite loop...

CVE-2005-1249

The IMAP daemon (IMAPD32.EXE) in Ipswitch IPS/ICS resolves a DoS by parsing a malformed LSUB command consisting of a long string of NULL characters, causing an infinite loop and high CPU usage. Affected: Ipswitch IMail/Collaboration Suite (ICS); observed in IMAPD32.EXE (vulnerable ranges not full...