CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

hMailServer 安全漏洞

hMailServer is an open source mail server from hMailServer Open Source. A security vulnerability exists in hMailServer version 5.8.6 and 5.6.9-beta, which stems from the use of hard-coded keys in BlowFish.cpp, which could lead to the decryption of database connection passwords...

CVE-2025-52374: Use of Hard-coded Cryptographic Key

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

CVE-2025-52373: Use of Hard-coded Cryptographic Key

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52374

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

PT-2025-30301 · Unknown · Hmailserver

Name of the Vulnerable Software and Affected Versions: hMailServer versions 5.6.9-beta hMailServer versions 5.8.6 Description: The software contains a hardcoded cryptographic key in the BlowFish.cpp file. This allows an attacker to decrypt passwords used in database connections from the...

CVE-2025-52374

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52373

The hMailServer mail server is vulnerable in versions 5.8.6 and 5.6.9-beta due to a hardcoded cryptographic key in the BlowFish.cpp file. This flaw enables an attacker to decrypt database connection passwords stored within the hMailServer.ini configuration file. Currently, there is no information...

CVE-2025-52372: Exposure of Sensitive Information to an Unauthorized Actor

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

CVE-2013-5571

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

HMailServer Buffer Overflow Vulnerability

HMailServer is an open source e-mail server based on the Windows platform . A security vulnerability exists in HMailServer 5.3.x and earlier versions. An attacker can exploit the vulnerability to cause a denial of service...

CVE-2013-5571

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

CVE-2013-5571

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

Memory corruption

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

CVE-2013-5571

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

CVE-2013-5571

HMailServer 5.3.x and earlier is affected by CVE-2013-5571 due to a memory corruption issue that could lead to a denial of service. The sources describe the vulnerability as memory corruption with possible DOS impact but do not specify the root cause, affected components, exact versions beyond th...

CVE-2013-5571: Improper Restriction of Operations within the Bounds of a Memory Buffer

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

PT-2020-7523

Name of the Vulnerable Software and Affected Versions: HMailServer versions prior to 5.3.x Description: The issue is related to memory corruption, which could potentially cause a denial of service. Recommendations: For versions prior to 5.3.x, at the moment, there is no information about a newer...

hMailServer 4.4.1 IMAP Command Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30663/info hMailServer is prone to a remote denial-of-service vulnerability caused by large numbers of certain IMAP commands. Exploiting this issue will cause the server to crash and deny access to legitimate users...