Multipe FTGate mail server vulnerabilities

Format string vulnerabilities in IMAP and POP3, HTTP server buffer overflow and crossite scripting...

[Full-disclosure] [ACSSEC-2005-11-25-0x5] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Format String Overflow ID: ACSSEC-2005-11-25 - 0x5 Class: Format String Overflow Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 POP3 Service Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Release...

[Full-disclosure] [ACSSEC-2005-11-25-0x4] FTGate 4.4 [Build 4.4.000 Oct 26 2005] St ack Buffer Overflow

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Stack Buffer Overflow ID: ACSSEC-2005-11-25 - 0x4 Class: Stack based Buffer Overflow Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Released: Dec 20...

[Full-disclosure] [ACSSEC-2005-11-25-0x3] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Cr oss Site Scripting Vulnerability

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - XSS Scripting Vulnerability ID: ACSSEC-2005-11-25 - 0x3 Class: Cross-Site-Scripting XSS Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Released: Dec...

FTGate4 IMAP EXAMINE Command Remote Overflow

The remote host appears to be running a version of FTGate, a commercial groupware mail server for Windows from FTGate Technology Ltd. The version of FTGate installed on the remote host includes an IMAP server that is prone to a buffer overflow attack due to boundary errors in its handling of...

FTGate mail server buffer overflow

IMAP server oversized EXAMINE command buffer overflow...

CVE-2005-3640

FTGate4 IMAP server (FTGate4, version 4.1) is affected by a remote buffer overflow in the IMAP handling logic (boundary errors in various IMAP commands, demonstrated with EXAMINE). The underlying cause is improper handling of long command arguments, enabling a remote attacker to potentially execu...

CVE-2005-3640

Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate FTGate4 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command...

CVE-2002-2082

FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock the mailboxes of other users...

CVE-2000-1237

The CVE-2000-1237 entry concerns the POP3 server in FTGate. The vulnerability arises because the server returns an -ERR response after receiving an invalid USER command, which can be used by a remote attacker to enumerate valid usernames and facilitate brute-force password guessing. Affected comp...

CVE-2002-2082

CVE-2002-2082 affects FTGate and FTGate Pro 1.05. The issue allows a remote attacker to lock other users’ mailboxes before authentication succeeds, representing a denial of service on mailbox access. Reports in Red Hat and CVE records reiterate that a pre-authentication mailbox lock is possible, ...

CVE-2002-2080

Floositek FTGate PRO 1.05 is affected by a denial-of-service vulnerability where an attacker can trigger memory and CPU exhaustion by sending a large number of RCPT TO: messages during an SMTP session. The impact is partial availability as per CVSS 2.0 metrics. No remediation details are provided...

CVE-2002-2078

A heap-based buffer overflow affects Floositek FTGate Pro 1.05 and FTGate Office 1.05. The flaw allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP USER command. Exploitation details are not provided in the connected documents; no patches ...

CVE-2000-1237

The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing...

CVE-2002-2078

Heap-based buffer overflow in Floositek 1 FTGate Pro 1.05 and 2 FTGate Office 1.05 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP USER command...

CVE-2002-2080

Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service memory and CPU consumption via a large number of RCPT TO: messages during an SMTP session...

FTGate Multiple Vulnerabilities

Binary data 2037.prm...

FloosieTek FTGate Mail Server 1.2 - Full Path Disclosure

FloosieTek FTGate Mail Server 1.2 - Full Path Disclosure source: https://www.securityfocus.com/bid/10059/info It has been reported that FTGate it prone to a server path disclosure vulnerability. This issue is due to an ill conceived error message that includes the server path. These issues may be...

FloosieTek FTGate Mail Server 1.2 - 'index.fts?folder' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10058/info It has been reported that FTGate is prone to multiple remote input validation vulnerabilities; a cross-site scripting issue and an HTML injection vulnerability. These issues are due to a failure of the application to properly sanitize user...

FloosieTek FTGate Mail Server 1.2 - index.fts?folder Cross-Site Scripting

FloosieTek FTGate Mail Server 1.2 - index.fts?folder Cross-Site Scripting source: https://www.securityfocus.com/bid/10058/info It has been reported that FTGate is prone to multiple remote input validation vulnerabilities; a cross-site scripting issue and an HTML injection vulnerability. These...