merak527.txt

CRIOLABS http://www.criolabs.net - Software: Merak Webmail Server - Type: Webmail - Company: Merak Mail Server, Inc. Software Software: Merak Webmail Server Version: 5.2.7 Plataforms: All Windows platforms Web: http://www.merakmailserver.com/ Vendor Description Merak's WebMail Server is used by...

PSCS VPOP3 2.0 - Email Server Remote Denial of Service

PSCS VPOP3 2.0 - Email Server Remote Denial of Service source: https://www.securityfocus.com/bid/10782/info It is reported that VPOP3 is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker issues a URI request containing a large value for the...

Rosiello Security's exploit for MDaemon

© Rosiello Security http://www.rosiello.org Bug found by hat-squad security. Background by securiteam.com MDaemon offers a full range of mail server functionality. MDaemon protects your users from spam and viruses, provides full security, includes seamless web access to your email via WorldClient...

Alt-N MDaemon 6.x/WorldClient - Form2Raw Raw Message Handler Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/9317/info It has been reported that MDaemon/WorldClient mail server may be prone to a buffer overflow vulnerability when handling certain messages with a 'From' field of over 249 bytes. This issue may allow a remote attacker to gain unauthorized access...

PSCS VPOP3 2.0 Email Server WebAdmin - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8869/info It has been reported that PSCS VPOP3 Email Server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to embed malicious HTML and script code in a link. The issue is reported to be present in the WebAdmin utilit...

MDaemon 5.0.5 authentication vulnerability

Hello, There is a security problem on MDaemon 5.0.5 maybe other versions affected as well regarding smtp authentication. Blank password authenticates any valid user: For primary domain: User: VALIDUSER or [email protected] Password: blank password For secondary domains: User:...

Multiple Buffer Overflow Vulnerabilities in SLMail (#NISR07052003A)

NGSSoftware Insight Security Research Advisory Name: Multiple Buffer Overflows in SLMail Systems Affected: SLMail 5.1.0.4420 on Windows Severity: High Risk Vendor URL: http://www.slmail.com Authors: David Litchfield [email protected] Mark Litchfield [email protected] Date: 7th May 2003...

ISMAIL (All Versions) Remote Buffer Overrun

NGSSoftware Insight Security Research Advisory Name: ISMAIL v 1.25 & v 1.4.3 Remote Buffer Overrun Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Remote Buffer Overrun Vendor URL: http://instantservers.com/ismail.html Author: Mark Litchfield [email protected] Date: 27th...

CVE-2002-2404

Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service crash via a long request to the POP3 port TCP port 110...

Exim Internet Mailer 3.35/3.36/4.10 - Format String

// source: https://www.securityfocus.com/bid/6314/info A format string vulnerability has been discovered in Exim. The problem occurs in the daemongo function. By supplying malicious format strings via the command line, it is possible for an attacker to execute arbitrary code with root privileges...

IISPop remote DOS

hi The IISPop EMail Server http://www.curtiscomp.com/was designed for small networks,This is a POP3 only server, designed to be paired with the SMTP server bundled in Windows 2000/IIS 5. I have found that IISpop is vulnerable has a attack DOS caused by sends of a broad buffer 289999 byte this...

wu-imap buffer overflow condition

10.05.2002 SECURITY BUG REPORT Affected version: WU-IMAP 2000.283 default install WU-IMAP 2000.284 default install WU-IMAP 2000.287 default install WU-IMAP 2001.315 compiled with RFC 1730 support Overview: Wu-imapd is an easy to set-up IMAP daemon created and distributed by Washington University...

WorldClient 5.0.x - Arbitrary File Deletion

WorldClient 5.0.x - Arbitrary File Deletion source: https://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary...

CGIScript.net - csMailto Hidden Form Field Remote Command Execution

source: https://www.securityfocus.com/bid/4579/info CGIScript.NET csMailto is a Perl script designed to support multiple mailto: forms. A vulnerability has been reported in some versions of this script. Reportedly, configuration values used by the script are contained in hidden form values. As a...

CVE-2001-1188

mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields...

Infinite Interchange 3.61 - Denial of Service

Infinite Interchange 3.61 - Denial of Service source: https://www.securityfocus.com/bid/2140/info Infinite Interchange is a multi function email server which supports most common internet protocols. An example of various functions include an http server and webmail interface. Unfortunately...

Infinite Interchange 3.61 - Denial of Service

source: https://www.securityfocus.com/bid/2140/info Infinite Interchange is a multi function email server which supports most common internet protocols. An example of various functions include an http server and webmail interface. Unfortunately Interchange is subject to a denial of service. By...

Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion

Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion source: https://www.securityfocus.com/bid/1698/info Like other firewalls, the Cisco PIX Firewall implements technology that reads the contents of packets passing through it for application-level filtering. In the case of SMTP, it can be...

NetcPlus SmartServer3 3.5.1 - POP Buffer Overflow

source: https://www.securityfocus.com/bid/790/info The POP server that is part of the NetcPlus SmartServer3 email server has an unchecked buffer that could allow an attacker to execute code on the server. If the USER command is followed by an argument of over 800 characters, the input buffer will...

breeze-server.txt

Date: Sun, 27 Dec 1998 00:32:34 -0500 From: //Stany To: [email protected] Subject: Breeze Network Server remote reboot and other bogosity. Good day. I am Ortodox Christian, so my Christmas is on Jan 7th, but in the spirit of giving, I would like to submit the following rant. It is rather...