CVE-2002-0411

AeroMail

CVE-2002-1056

Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format RTF, which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or...

NOCC 0.9.x - Webmail Script Injection

NOCC 0.9.x - Webmail Script Injection source: https://www.securityfocus.com/bid/4740/info NOCC is a web based email client implemented in PHP4. It includes support for POP3, SMTP and IMAP servers, MIME attachments and multiple languages. A script injection issue has been reported with the way...

CVE-2001-1282

CVE-2001-1282 affects Ipswitch IMail versions 7.04 and earlier. The flaw causes the physical path of email attachments to be recorded in the message header, enabling remote attackers to obtain potentially sensitive configuration information. The available documents do not specify the exact root c...

Code execution via Eudora attachments

It's possible to launch executable attached to e-mail message by specifying it as image source...

CVE-2001-0996

POP3Lite before 0.2.4 is vulnerable due to improper quoting of a dot in an email message, allowing a remote attacker to append arbitrary text to the end of an email. This text could be interpreted by mail clients as valid POP server responses or other input, potentially causing clients to crash o...

Outlook Express and SPA (Secure Password Authentication)

Topic: Outlook Express and SPA Secure Password Authentication Author: 3APA3A Affected Software: Internet Explorer 5.5, 6.0 Vendor: Microsoft Status: Informational 1. Background: Outlook Express doesn't support CRAM-MD5 or APOP and there is only one way to authenticate user on POP3/IMAP/SMTP serve...

CVE-1999-1228

CVE-1999-1228 concerns various modems that do not implement a guard time or use a 0 guard time, enabling remote attackers to execute commands (e.g., ATH, ATH0) via a "+++" sequence embedded in ICMP packets, email subject lines, IRC, and more. Connected sources provide concrete details: exploitati...

POP3Lite 0.2.3b minor client side DoS and message injection

vulnerable POP3Lite = 0.2.3b not vulnerable POP3Lite = 0.2.4 abstract POP3Lite is a modular POP3 daemon developed to be fast, flexible and easy to use. It runs on Linux and BSD. POP3Lite fails to escape dots in messages it transfers to clients. Clients popping their mail from a vulnerable POP3Lit...

Qualcomm Eudora 5.1 - Hidden Attachment Execution

source: https://www.securityfocus.com/bid/2796/info Eudora is an email program for the Windows platform. Eudora contains a vulnerability which may make it possible for an attacker to excecute arbitrary code on a remote system even if 'allow executables in HTML content' is disabled, if the 'Use...

Переполнение буфера в Becky! (buffer overflow)

Переполнение буфера при длинной строке в теле письма...

CVE-2000-0716

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...

CVE-2000-1138

Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected...

CVE-2000-0909

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header...

CVE-2000-1138

CVE-2000-1138 affects Lotus Notes R5 client (R5.0.5 and earlier). The issue is that the client does not properly warn users when an S/MIME email message has been modified, allowing an attacker to modify the email in transit without detection. The available documents clearly identify the affected ...

CVE-2000-0931

Pegasus Mail

Проблема в Lotus Notes R5

При получении письма с некорректной сигнатурой пользователь не получает предупреждение...

DoS против Exchange

Пустой разделитель между MIME-частями Content-Type: boundary в письме приводит к отказу сервера Exchange...

Ipswitch IMail 6.x - File Attachment

source: https://www.securityfocus.com/bid/1617/info IPSWITCH ships a product titled IMail, an email server for usage on NT servers serving clients their mail via a web interface. To this end the IMail server provides a web server typically running on port 8383 for it's end users to access. Via th...

Ошибка между imapd И mail.local

Hello, Надеюсь, что хотя бы из чувства патриотизма может быть еще кто-нибудь в дальнейшем решится писать в этот список рассылки до или хотя бы одновременно публикации в Bugtraq : Ошибка несерьезная, но достаточно интересная. Дело в том, что в данном случае ни одна из программ не содержит явной...