Qbik WinGate LIST命令远程拒绝服务漏洞

BUGTRAQ ID: 30606 CNCAN ID：CNCAN-2008081104 Qbik WinGate是一款Internet代理服务器及防火墙软件包。 Qbik WinGate处理LIST命令存在问题，远程攻击者可以利用漏洞对应用服务程序进行拒绝服务攻击。 发送如下消息给给IMAP服务器： A01 LOGIN user password A02 LIST Ax1000 根据相关服务器资源情况可导致服务器崩溃，攻击可造成服务器拒绝所有连接造成拒绝服务攻击。 Qbik WinGate 6.2.2 目前没有解决方案提供： http://www.wingate.com/...

WinGate Mail Server DoS

IMAP LIST command resources exhaustion...

NoticeWare Email Server DoS

Crash on oversized IMAP LOGIN command...

Qbik WinGate 6.2.2 - LIST Remote Denial of Service

Qbik WinGate 6.2.2 - LIST Remote Denial of Service source: https://www.securityfocus.com/bid/30606/info WinGate is prone to a remote denial-of-service vulnerability affecting the application's IMAP email server. Exploiting this issue will consume computer resources and deny access to legitimate...

[AJECT] WinGate Email Server (IMAP) vulnerability

---------------------------------------- Synopsis ---------------------------------------- WinGate is vulnerable to denial-of-service DoS attacks caused probably by a resource exhaustion vulnerability. The IMAP server ceases to provide access to its clients after processing a LIST command with a...

[AJECT] NoticeWare IMAP Email Server 4.6.2 DoS vulnerability

---------------------------------------- Synopsis ---------------------------------------- NoticeWare Email Server NG 4.6.2 is vulnerable to denial-of-service DoS attacks. The IMAP server crashes after receiving several large LOGIN messages. Product: NoticeWare Email Server NG Version: 4.6.3 and...

Qbik WinGate 6.2.2 - 'LIST' Remote Denial of Service

source: https://www.securityfocus.com/bid/30606/info WinGate is prone to a remote denial-of-service vulnerability affecting the application's IMAP email server. Exploiting this issue will consume computer resources and deny access to legitimate users. WinGate 6.2.2 is vulnerable; other versions m...

CVE-2008-3449

MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service crash via multiple IMAP connection requests to the same folder...

CVE-2008-3449

MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service crash via multiple IMAP connection requests to the same folder...

CVE-2008-3449

CVE-2008-3449 affects MailEnable Professional 3.5.2 and MailEnable Enterprise 3.52, where the MailEnable IMAP server can be triggered to crash under load by multiple simultaneous IMAP connections to the same folder, causing a denial of service. The OpenVAS/Nessus entries reference a remediation: ...

MailEnable IMAP连接远程拒绝服务漏洞

BUGTRAQ ID: 30498 MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable处理畸形请求时存在漏洞，如果远程攻击者对同一文件夹创建了大量的IMAP连接的话，就可能导致邮件服务器崩溃。 MailEnable 3.52 MailEnable ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mailenable.com/hotfix/ME-10042.EXE...

MailEnable IMAP Connection Saturation Remote DoS (ME-10042)

The IMAP server bundled with the version of MailEnable installed on the remote host reportedly may crash under load when there are multiple connections to the same folders. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33810; scriptversion"1.13"; scriptcvsdate"Date:...

UoW IMAP Server LSUB Buffer Overflow

This module exploits a buffer overflow in the 'LSUB' command of the University of Washington IMAP service. This vulnerability can only be exploited with a valid username and password. This module requires Metasploit: https://metasploit.com/download Current source:...

SurgeMail IMAP Service 'APPEND'命令远程缓冲区溢出漏洞

BUGTRAQ ID: 30000 CNCAN ID：CNCAN-2008070103 Surgemail是一款邮件服务程序。 Surgemail处理'APPEND'命令存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 提交超长字符串作为'APPEND'命令，可触发IMAP服务崩溃，造成缓冲区溢出，可能以应用程序权限执行任意指令。 NetWin SurgeMail 3.9e 目前没有详细解决方案提供： http://www.rss-aggregator.com/ http://www.sebug.net/exploit/3999...

Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS

No description provided by source. !/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = '\x41' 30...

httpd: mod_imagemap XSS

Cross-site scripting XSS vulnerability in the 1 modimap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the 2 modimagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

httpd cross-site scripting flaw in mod_imap

Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...

Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)

Surgemail 39e-1 - Authenticated IMAP Remote Buffer Overflow Denial of Service PoC !/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s =...

surgemail-dos.txt

!/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = '\x41' 3000 s.connect'192.168.0.103',143...

Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS

Exploit for unknown platform in category dos / poc ========================================================= Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS ========================================================= !/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer...