MailEnable POP3 Server Authentication Vulnerabilities

The remote host is running MailEnable, a commercial mail server for Windows. The POP3 server bundled with the version of MailEnable on the remote host has a buffer overflow flaw involving authentication commands that can be exploited remotely by an unauthenticated attacker to crash the affected...

[Full-disclosure] [MU-200603-01] MailEnable POP3 Pre-Authentication Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MailEnable POP3 Pre-Authentication Buffer Overflow MU-200603-01 March 20, 2006 http://labs.musecurity.com/advisories.html Affected Product / Versions: MailEnable Professional 1.7, 1.71, 1.72 MailEnable Standard 1.91, 1.92 MailEnable Enterprise 1.2...

Sql injection

SQL injection vulnerability in search.asp in Hosting Controller 6.1 Hotfix 2.9 allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1229

CVE-2006-1229 is a SQL injection vulnerability in the search.asp page of Hosting Controller 6.1 (Hotfix 2.9) that allows remote execution of arbitrary SQL commands via the search parameter. The core issue is an injectable parameter in the search functionality, resulting in partial confidentiality...

IRM 017: Multiple Vulnerabilities in Infovista Portal SE

---------------------------------------------------------------------- IRM Security Advisory No. 017 Multiple Vulnerabilities in Infovista Portal SE Vulnerability Type / Importance: Directory Traversal / High Information Leakage / Low Problem Discovered: January 20th 2006 Vendor Contacted: Januar...

Code injection

Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL...

CVE-2006-0862

CVE-2006-0862 affects InfoVista PortalSE 2.0 Build 20087 on Solaris 8; an unspecified vulnerability allows remote attackers to read arbitrary files via a crafted URL. The issue is reported to occur without the IV00038969 hotfix. No public details on underlying root cause are provided beyond the v...

CVE-2006-0862

Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL...

Sql injection

SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the 1 GatewayID parameter in an add action in AddGatewaySettings.asp and 2 IP parameter in IPManager.asp...

CVE-2006-0581

CVE-2006-0581 refers to a SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8. The issue allows remote authenticated users to execute arbitrary SQL commands via the GatewayID parameter in AddGatewaySettings.asp and the IP parameter in IPManager.asp. The available sources confirm the ...

MailEnable IMAP command buffer overflow

Added: 01/24/2006 CVE: CVE-2004-2501 BID: 11755 OSVDB: 12135 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow in the IMAP service allows an...

[SA18551] MailSite Cross-Site Scripting and Denial of Service

TITLE: MailSite Cross-Site Scripting and Denial of Service SECUNIA ADVISORY ID: SA18551 VERIFY ADVISORY: http://secunia.com/advisories/18551/ CRITICAL: Less critical IMPACT: Cross Site Scripting, DoS WHERE: From local network SOFTWARE: MailSite 7.x http://secunia.com/product/6895/ MailSite 6.x...

[SA18495] EMC NetWorker Unspecified Code Execution Vulnerability

TITLE: EMC NetWorker Unspecified Code Execution Vulnerability SECUNIA ADVISORY ID: SA18495 VERIFY ADVISORY: http://secunia.com/advisories/18495/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Legato NetWorker 7.x http://secunia.com/product/2692/...

[SA18521] AOL You've Got Pictures ActiveX Control Buffer Overflow

TITLE: AOL You've Got Pictures ActiveX Control Buffer Overflow SECUNIA ADVISORY ID: SA18521 VERIFY ADVISORY: http://secunia.com/advisories/18521/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: AOL 8.x http://secunia.com/product/6839/ AOL 9.x Classic...

AOL You've Got Pictures ActiveX control buffer overflow

Overview The AOL You've Got Pictures service contains a buffer overflow that may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description AOL You've Got Pictures provides digital photography storage and manipulation services for AOL users. There is a...

Microsoft Security Bulletin MS05-054 Cumulative Security Update for Internet Explorer (905915)

Microsoft Security Bulletin MS05-054 Cumulative Security Update for Internet Explorer 905915 Published: December 13, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

ieDoS.pm.txt

/ Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix for GDI MS05-053 installed Disclaimer: This code is for...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

Exploit for unknown platform in category dos / poc ====================================================================== MS Windows Metafile mtNoObjects Denial of Service Exploit MS05-053 ====================================================================== / Author: Winny Thomas Pune, INDIA Th...

MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)

No description provided by source. / Author: Winny Thomas Pune, INDIA The crafted metafile WMF from this code when viewed in explorer crashes it. The issue is seen when the field 'mtNoObjects' in the Metafile header is set to 0x0000. The code was tested on Windows 2000 server SP4. The issue does...

Microsoft Windows Metafile - gdi32.dll Denial of Service (MS05-053)

Microsoft Windows Metafile - gdi32.dll Denial of Service MS05-053 / Author: Winny Thomas Pune, INDIA The crafted metafile from this code when viewed in internet explorer raises the CPU utilization to 100%. The code was tested on Windows 2000 server SP4. The issue does not occur with the hotfix fo...