5250 matches found
FTGate buffer overflow
Buffer overflow in SMTP MAIL FROM: command...
ISMAIL buffer overflow
Buffer overflow in SMTP MAIL FROM: and RCPT TO:...
PT-2002-2656 · Pingtel · Pingtel Xpressa
Name of the Vulnerable Software and Affected Versions: Pingtel Xpressa versions 1.2.5 through 2.0.1 Description: The issue allows remote attackers to avoid registering with the SIP registrar by exploiting predictable values in a Session Identification Protocol SIP request, specifically the Call-I...
iSMTP buffer overflow
Buffer overflow on oversized MAIL FROM:...
Bug in Opera and Konqueror
/----------------+--------------------------------------+------------- | sp00fed packet | | advisory 2 | +----------------+--------------------------------------+-------------+ | Product: multiply vendors browsers | | Vulnerability: buffer overflow | | Danger: low |...
memberlist.php of vBulletin
vBulletin ALL versions Vendor status: notified 3/18/2; no response Within the first few lines of code in memberlist.php, the variable $letterbits is evaled. Because of the way PHP initializes variables, we can inject HTML, or JavaScript into the document. So by directing a user to, for example:...
CVE-1999-1542
CVE-1999-1542 affects RPMMail prior to 1.4. An attacker can remotely run commands by sending an e‑mail containing shell metacharacters in the MAIL FROM command, indicating a remote code execution vulnerability caused by unsanitized input in the mail command path. The provided documents do not spe...
OpenSSH 2.5.x - 2.9 Multiple Vulnerabilities
According to its banner, the remote host appears to be running OpenSSH version between 2.5.x and 2.9. Such versions reportedly contain multiple vulnerabilities : - sftp-server does not respect the 'command=' argument of keys in the authorizedkeys2 file. CVE-2001-0816 - sshd does not properly hand...
CVE-2001-0494
IPSwitch IMail SMTP Buffer Overflow (CVE-2001-0494) affects IMail Server 6.06 and earlier. The OpenVAS/Nessus/NVD entries describe a vulnerability in theIMail SMTP daemon where inadequate bounds checking on input passed to the Mailing List handler allows remote attackers to remotely execute arbit...
CVE-2001-0631
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...
Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service
Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service // source: https://www.securityfocus.com/bid/1825/info Due to insufficient bounds checking in the code that handles the fields 'MAIL FROM:' and 'RCPT TO:', it is possible to remotely crash Avirt Mail. Entering over 272 characters into the...
CVE-1999-0873
The issue CVE-1999-0873 affects the Skyfull mail server and is caused by a buffer overflow triggered via the MAIL FROM command. Public sources (NVD) describe a network-exploitable vulnerability with a low attack complexity and no required authentication, with partial impacts on confidentiality, i...
Дырка в библиотеке horde
При обработке поля From: не проверяется наличие метасимволов, что позволяет вставить шелл-команды в письмо...
Horde library Bug part 2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Horde Library $from Bug part 2 + How to exploit with IMP and Sendmail Description: The Fix of the first detected problem with the $from variable in the horde library was just escaping shellchars which avoids directly executing commands. It is still...
horde library bug - unchecked from-address
Hi, this bug we discovered recently. HORDE 1.2.0 $from-bug and how to exploit with IMP 2.2.0 Disclaimer: This is intended as a paper for sysadmins who want to secure their systems. It is NOT a how to for scriptkiddies to run any attack on a IMP-using site. The authors of this text will not be hel...
Ошибка между WU-imap И mail.local
При доставке письма в Unix mailbox mail.local считает, что разделителем между письмами является пустая строка со следующим за ней заголовком "From ". Если в письме встречается такое сочетание, то "From" комментируется знаком ''. К сожалению, imapd считает разделителем строку "From " в определенно...
CVE-2000-0343
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header...
CVE-2000-0343
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header...