hMailServer security vulnerability

hMailServer is an open source mail server from hMailServer Open Source. A security vulnerability exists in hMailServer version 5.8.6 and 5.6.9-beta, which stems from the use of a hard-coded key in Encryption.cs, which may lead to decryption of other server passwords...

CVE-2025-52374: Use of Hard-coded Cryptographic Key

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

CVE-2025-52373: Use of Hard-coded Cryptographic Key

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-52372: Exposure of Sensitive Information to an Unauthorized Actor

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

CVE-2025-52372

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

PT-2025-30301 · Unknown · Hmailserver

Name of the Vulnerable Software and Affected Versions: hMailServer versions 5.6.9-beta hMailServer versions 5.8.6 Description: The software contains a hardcoded cryptographic key in the BlowFish.cpp file. This allows an attacker to decrypt passwords used in database connections from the...

CVE-2025-52374

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2013-5571

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

HMailServer Buffer Overflow Vulnerability

HMailServer is an open source e-mail server based on the Windows platform . A security vulnerability exists in HMailServer 5.3.x and earlier versions. An attacker can exploit the vulnerability to cause a denial of service...

CVE-2013-5571

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

Memory corruption

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

CVE-2013-5571

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

CVE-2013-5571

HMailServer 5.3.x and earlier is affected by CVE-2013-5571 due to a memory corruption issue that could lead to a denial of service. The sources describe the vulnerability as memory corruption with possible DOS impact but do not specify the root cause, affected components, exact versions beyond th...

CVE-2013-5571

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

CVE-2013-5571: Improper Restriction of Operations within the Bounds of a Memory Buffer

HMailServer 5.3.x and prior: Memory Corruption which could cause DOS...

PT-2020-7523

Name of the Vulnerable Software and Affected Versions: HMailServer versions prior to 5.3.x Description: The issue is related to memory corruption, which could potentially cause a denial of service. Recommendations: For versions prior to 5.3.x, at the moment, there is no information about a newer...

hMailServer 4.4.1 IMAP Command Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30663/info hMailServer is prone to a remote denial-of-service vulnerability caused by large numbers of certain IMAP commands. Exploiting this issue will cause the server to crash and deny access to legitimate users...

hMailServer 5.3.3 IMAP Remote Crash PoC

No description provided by source. Exploit Title: hMailServer 5.3.3 IMAP Remote Crash PoC Date: 10/27/2012 Vendor Homepage: http://hmailserver.com Software Link: http://www.hmailserver.com/index.php?page=backgrounddownloadfile&downloadid=207 Version: hMailServer 5.3.3 - Build 1879 Tested on: -...