CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

IceWarp Merak Mail Server < 9.4.2 'Base64FileEncode()' Stack-Based Buffer Overflow Vulnerability

IceWarp Merak Mail Server is prone to a stack-based buffer overflow vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

IceWarp Merak邮件服务器Base64FileEncode()函数栈溢出漏洞

BUGTRAQ ID: 34739 Merak Email Server是一个全面的办公室局域网或Internet通讯邮件解决方案。 Merak邮件服务器的api.dll库没有正确地验证对Base64FileEncode函数所传送的第二个参数，如果远程攻击者向icewarpapiobjectcall函数的最后一个参数提交了超长输入的话，就可以触发栈溢出，导致执行任意代码。 Icewarp Merak Mail Server 9.4.1 Icewarp ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Icewarp Merak Mail Server 9.4.1 Base64FileEncode() BOF PoC

No description provided by source. ?php / Icewarp Merak Mail Server 9.4.1 IceWarpServer.APIObject/api.dll Base64FileEncode stack based buffer overflow poc by Nine:Situations:Group::surfista site: http://retrogod.altervista.org/ api.dll contains a stack based buffer overflow in the second argument...

Icewarp Merak Mail Server 9.4.1 - Base64FileEncode() Buffer Overflow (PoC)

Icewarp Merak Mail Server 9.4.1 - Base64FileEncode Buffer Overflow PoC "cgi-fcgi" die"Launch from the merak php console!"; if !functionexists"icewarpapiobjectcall" die"You need the icewarp extension loaded!"; $shellcode= //original scode, alpha2 esp sh.txt...

Icewarp Merak Mail Server 9.4.1 Base64FileEncode() BOF PoC

Exploit for unknown platform in category dos / poc ========================================================== Icewarp Merak Mail Server 9.4.1 Base64FileEncode BOF PoC ========================================================== "cgi-fcgi" die"Launch from the merak php console!"; if...

Icewarp Merak Mail Server 9.4.1 - 'Base64FileEncode()' Buffer Overflow (PoC)

"cgi-fcgi" die"Launch from the merak php console!"; if !functionexists"icewarpapiobjectcall" die"You need the icewarp extension loaded!"; $shellcode= //original scode, alpha2 esp sh.txt "\xeb\x13\x5b\x31\xc0\x50\x31\xc0\x88\x43\x4a\x53". "\xbb\x0d\x25\x86\x7c". //WinExec, kernel32.dll XP SP3...

Icewarp Merak Mail Server 9.4.1 Overflow

"cgi-fcgi" die"Launch from the merak php console!"; if !functionexists"icewarpapiobjectcall" die"You need the icewarp extension loaded!"; $shellcode= //original scode, alpha2 esp sh.txt "\xeb\x13\x5b\x31\xc0\x50\x31\xc0\x88\x43\x4a\x53". "\xbb\x0d\x25\x86\x7c". //WinExec, kernel32.dll XP SP3...

IceWarp Merak Mail Server < 9.4.0 IMG Tag XSS

The remote host is running IceWarp Merak Mail Server - a webmail server for Windows and Linux. According to its banner, the version of IceWarp installed on the remote host is older than 9.4.0. Such versions reportedly fail to sanitize input passed to 'IMG' HTML tags in an email message before...

CVE-2008-5734

Cross-site scripting XSS vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message...

Cross site scripting

Cross-site scripting XSS vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message...

CVE-2008-5734

Cross-site scripting XSS vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attackers to inject arbitrary web script or HTML via an IMG element in an HTML e-mail message...

CVE-2008-5734

IceWarp Merak Mail Server Web Mail (IceWarp Merak Mail Server 9.3.2) is affected by CVE-2008-5734: an XSS flaw where an IMG tag in HTML emails is not sanitized, allowing a remote attacker to inject arbitrary script/HTML into a user’s browser. Root cause: improper sanitization of IMG HTML tag inpu...

IceWarp Merak Mail Server < 9.4.0 IMG Tag XSS

Binary data 4800.prm...

Merak Mail Server邮件消息HTML注入漏洞

BUGTRAQ ID: 32969 Merak Email Server是一个全面的办公室局域网或Internet通讯邮件解决方案。 Merak Mail Server没有正确地过滤邮件消息中的IMG HTML标签便显示给了用于，如果攻击者发送了恶意邮件的话，当用户查看邮件时就会导致在浏览器会话中注入并执行任意HTML和脚本代码。 Icewarp Merak Mail Server 9.3.2 Icewarp ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.icewarp.com/...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0218

Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0218

Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0218

IceWarp Merak Mail Server (admin/index.html) is affected by an XSS in the message parameter. The vulnerability arises from insufficient sanitization of user input, allowing an unauthenticated, remote attacker to inject arbitrary HTML/JavaScript that executes in the victim’s browser within the sit...