CommuniGate Pro Server < 5.0.7 LDAP BER Decoding Multiple Vulnerabilities

The remote host appears to be running CommuniGate Pro, a commercial email and groupware application. The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle requests with negative BER lengths. A user can leverage this issue to crash not...

CVE-2005-3640

FTGate4 IMAP server (FTGate4, version 4.1) is affected by a remote buffer overflow in the IMAP handling logic (boundary errors in various IMAP commands, demonstrated with EXAMINE). The underlying cause is improper handling of long command arguments, enabling a remote attacker to potentially execu...

CVE-2005-3640

Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate FTGate4 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command...

FTGate4 Groupware Mail Server 4.1 (imapd) Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "143", ; unless $remote...

CVE-2005-3640: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate FTGate4 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command...

FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow (PoC)

!/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "143", ; unless $remote die "Can't connect to $host" print "...

FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow (PoC)

FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow PoC !/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host,...

FTGate4 Groupware Mail Server 4.1 (imapd) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================================== FTGate4 Groupware Mail Server 4.1 imapd Remote Buffer Overflow PoC ==================================================================== !/usr/bin/perl use IO::Socket; print...

PhpGroupWare arbitrary command execution

The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Horde Detection (HTTP)

HTTP based detection of Horde. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15604";...

Debian DSA-798-1 : phpgroupware - several vulnerabilities

Several vulnerabilities have been discovered in phpgroupware, a web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2498 Stefan Esser discovered another vulnerability in the XML-RPC libraries that allows...

Multiple Evultion e-mail agent and groupware client format string vulnerabilities

Format string bugs on vCard format parsing, LDAP server reply parsing, remote server tasks displaying...

DSA-746-1 phpgroupware - remote command execution

Bulletin has no description...

CVE-2005-2164

CVE-2005-2164 describes a SQL injection vulnerability in Covide Groupware-CRM allowing remote attackers to execute arbitrary SQL via unknown vectors. NVD reports a base score of 7.5 (HIGH) with network attack vector, low complexity, no authentication, and partial impacts on confidentiality, integ...

CVE-2005-2164

SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

CVE-2005-2164

SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

CVE-2005-2164: Undefined Security Weakness

SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

CVE-2004-1927

Directory traversal vulnerability in the map feature tiki-map.phtml in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. dot dot sequences in the mapfile parameter...

CVE-2004-1928

CVE-2004-1928 affects Tiki Wiki CMS Groupware (TikiWiki) up to version 1.8.1. The issue is in the image upload feature, where remote attackers can upload and potentially execute arbitrary files via the img/wiki_up URL. The vulnerability is remote, over the network, and contributes to partial conf...

CVE-2004-1926

Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to inject arbitrary code via the 1 Theme, 2 Country, 3 Real Name, or 4 Displayed time zone fields in a User Profile, or the 5 Name, 6 Description, 7 URL, or 8 Country fields in a Directory/Add Site operation...