NoticeWare Corporation NoticeWare Email Server NG LOGIN消息拒绝服务漏洞

BUGTRAQ ID: 30605 CNCAN ID：CNCAN-2008081103 NoticeWare Email Server NG是一款EMAIL服务程序。 NoticeWare Email Server NG处理LOGIN消息存在问题，远程攻击者可以利用漏洞对应用服务程序进行拒绝服务攻击。 通过发送40 LOGIN消息给IMAP服务器： A001 LOGIN Ax5000 AAAAA 根据重复消息的数量可能相关服务器资源可导致服务器崩溃，造成拒绝服务攻击。 NoticeWare Corporation Noticeware Email Server NG 4.6.3...

NoticeWare Email Server DoS

Crash on oversized IMAP LOGIN command...

[AJECT] NoticeWare IMAP Email Server 4.6.2 DoS vulnerability

---------------------------------------- Synopsis ---------------------------------------- NoticeWare Email Server NG 4.6.2 is vulnerable to denial-of-service DoS attacks. The IMAP server crashes after receiving several large LOGIN messages. Product: NoticeWare Email Server NG Version: 4.6.3 and...

[AJECT] WinGate Email Server (IMAP) vulnerability

---------------------------------------- Synopsis ---------------------------------------- WinGate is vulnerable to denial-of-service DoS attacks caused probably by a resource exhaustion vulnerability. The IMAP server ceases to provide access to its clients after processing a LIST command with a...

Qbik WinGate 6.2.2 - 'LIST' Remote Denial of Service

source: https://www.securityfocus.com/bid/30606/info WinGate is prone to a remote denial-of-service vulnerability affecting the application's IMAP email server. Exploiting this issue will consume computer resources and deny access to legitimate users. WinGate 6.2.2 is vulnerable; other versions m...

Noticeware Email Server 4.6 - NG LOGIN Messages Denial of Service

Noticeware Email Server 4.6 - NG LOGIN Messages Denial of Service source: https://www.securityfocus.com/bid/30605/info NoticeWare Email Server NG is prone to a denial-of-service vulnerability because it fails to handle user-supplied input. Remote attackers can exploit this issue to deny service t...

Noticeware Email Server 4.6 - NG LOGIN Messages Denial of Service

source: https://www.securityfocus.com/bid/30605/info NoticeWare Email Server NG is prone to a denial-of-service vulnerability because it fails to handle user-supplied input. Remote attackers can exploit this issue to deny service to legitimate users. NoticeWare Email Server NG 4.6.2 and 4.6.3 are...

Code injection

MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service application crash via a long string to IMAP port 143/tcp...

CVE-2008-1713

MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service application crash via a long string to IMAP port 143/tcp...

CVE-2008-1713

CVE-2008-1713 affects NoticeWare Email Server 4.6.1.0 (MailServer.exe). The vulnerability allows remote attackers to cause an application crash (DoS) by sending a long string to the IMAP port (143/tcp). The connected sources confirm the component and the attack vector, but do not provide a specif...

noticeware-dos.txt

NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on XP/2003 Taken from :...

Noticeware Email Server 4.6.1.0 - Denial of Service

Noticeware Email Server 4.6.1.0 - Denial of Service NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on...

Noticeware Email Server 4.6.1.0 Denial of Service Exploit

No description provided by source. NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on XP/2003 Taken from :...

Noticeware Email Server 4.6.1.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= Noticeware Email Server 4.6.1.0 Denial of Service Exploit ========================================================= NoticeWare Email Server Application: Noticeware Email Server Version:...

Noticeware Email Server 4.6.1.0 - Denial of Service

NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on XP/2003 Taken from :...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

CVE-2002-2404

Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service crash via a long request to the POP3 port TCP port 110...

CVE-2002-2404

The CVE-2002-2404 issue affects IISPop email server versions 1.161 and 1.181. The root cause is a buffer overflow in the POP3 handling logic that can be triggered by a long request to the POP3 port (TCP 110). This results in a remote denial of service (crash). The available documents do not provi...

IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit

No description provided by source. / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org 脪脭脟掳脫脨脮芒啪枚脪禄啪枚imail碌脛exp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d host options Options: -d: Hostname to attack Required -...

Preemptive Protection against Ipswitch IMail Server IMAP SEARCH Command Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Ipswitch IMail Server IMAP component. Ipswitch IMail server is a messaging service suite that supports numerous mail exchanging protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing e-mail from a local...