IA eMailServer IMAP SEARCH Command Remote Overflow

The remote host is running IA eMailServer, a commercial messaging system for Windows. The IMAP server bundled with the version of IA eMailServer installed on the remote host crashes when it receives a SEARCH command argument of 560 or more characters. An authenticated attacker could exploit this...

CommuniGate Pro Server < 5.0.7 LDAP BER Decoding Multiple Vulnerabilities

The remote host appears to be running CommuniGate Pro, a commercial email and groupware application. The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle requests with negative BER lengths. A user can leverage this issue to crash not...

Ubuntu 4.10 / 5.04 / 5.10 : fetchmail vulnerability (USN-233-1)

Steve Fosdick discovered a remote Denial of Service vulnerability in fetchmail. When using fetchmail in 'multidrop' mode, a malicious email server could cause a crash by sending an email without any headers. Since fetchmail is commonly called automatically with cron, for example, this crash could...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 Oracle9i have unspecified impact and attack vectors, as identified by Oracle Vuln 1 OCS01, 2 OCS02, 3 OCS03, 4 OCS04, 5 OCS05, 6 OCS06, 7 OCS07, 8 OCS08, and 9 OCS09 in the a Email Server component; 10...

CVE-2006-0276

Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 Oracle9i have unspecified impact and attack vectors, as identified by Oracle Vuln 1 OCS01, 2 OCS02, 3 OCS03, 4 OCS04, 5 OCS05, 6 OCS06, 7 OCS07, 8 OCS08, and 9 OCS09 in the a Email Server component; 10...

Ubuntu 4.10 / 5.04 / 5.10 : ucd-snmp vulnerability (USN-190-2)

USN-190-1 fixed a vulnerability in the net-snmp library. It was discovered that the same problem also affects the ucs-snmp implementation which is used by the Cyrus email server. Original advisory : A remote Denial of Service has been discovered in the SMNP Simple Network Management Protocol...

USN-233-1: fetchmail vulnerability

Steve Fosdick discovered a remote Denial of Service vulnerability in fetchmail. When using fetchmail in 'multidrop' mode, a malicious email server could cause a crash by sending an email without any headers. Since fetchmail is commonly called automatically with cron, for example, this crash could...

CVE-2005-3454

Technical details are not publicly available in the provided documents for CVE-2005-3454. No specifics on affected products, impact, or remediation are supplied. Monitor for updates.

BusinessMail email server buffer overflow

Buffer overflow in multiple SMTP commands...

BusMail_SMTPDOS.pl.txt

Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...

[Full-disclosure] Buffer overflow in BusinessMail email server system 4.60.00

Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...

CVE-2004-2150

Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote attackers to determine valid account names...

CVE-2004-2150

The CVE-2004-2150 entry concerns Nettica Corporation INTELLIPEER Email Server 1.01, which discloses account validity through differing error messages. Related sources (PT-2004-3045 and Nessus entries) describe remote authentication attempts revealing whether an account exists, enabling user enume...

IA eMailServer IMAP4 LIST Command Format String Remote DoS

The remote host is running True North Software's IA eMailServer, a messaging system for Windows. The remote version of IA eMailServer suffers from a format string vulnerability leading to a denial of service that can be exploited by an authenticated user when sending a specially crafted IMAP LIST...

True North eMailServer < 5.3.4 Build 2019 LIST Command Remote DoS (deprecated)

Binary data 3036.prm...

Sun JavaMail 1.3 - API MimeMessage Infromation Disclosure

source: https://www.securityfocus.com/bid/13683/info The MimeMessage method in the Sun JavaMail API does not perform sufficient validation on message number values that are passed to the method during requests. An attacker that can successfully authenticate to an email server implementation that ...

CVE-2004-2150

Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote attackers to determine valid account names...

PT-2004-3045 · Nettica · Intellipeer Email Server

Name of the Vulnerable Software and Affected Versions: Nettica Corporation INTELLIPEER Email Server version 1.01 Description: The issue allows remote attackers to determine valid account names by exploiting different error messages displayed for valid and invalid account names. Recommendations: F...

slmail5x.txt

SLMail 5.x POP3 Remote Pass Buffer Overflow Exploit http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0942 INTRO: SLMail Pro is web-based POP3 and SMTP email server software for MicrosoftT Windows 2000 that includes advanced features usually found in enterprise-level systems. Seattlelab...

merak527.txt

CRIOLABS http://www.criolabs.net - Software: Merak Webmail Server - Type: Webmail - Company: Merak Mail Server, Inc. Software Software: Merak Webmail Server Version: 5.2.7 Plataforms: All Windows platforms Web: http://www.merakmailserver.com/ Vendor Description Merak's WebMail Server is used by...