MERCUR Messaging IMAP Service Multiple Command Remote Overflow

The remote host is running MERCUR Messaging Server / Mailserver, a commercial messaging application for Windows. The IMAP server component of this software fails to properly copy overly-long arguments to LOGIN and SELECT commands, which can be exploited to crash the server and possibly to execute...

DSA-1010-1 ilohamail - missing input sanitising

Bulletin has no description...

[SECURITY] [DSA 1010-1] New ilohamail packages fix cross-site scripting vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1010-1 [email protected] http://www.debian.org/security/ Martin Schulze March 20th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1255

Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long string to the 1 LOGIN or 2 SELECT command, a different set of attack vectors and possibly a...

Immunity Canvas: VSPLOIT_MERCURIMAP

Name| vsploitmercurimap ---|--- CVE| CVE-2006-1255 Exploit Pack| CANVAS Description| Mercur Imap 5.0 Remote Buffer Overflow Notes| CVE Name: CVE-2006-1255 VENDOR: Mercur Repeatability: One time Date public: 03/16/2006 CVE Url: https://vulners.com/cve/CVE-2006-1255 CVSS: 10.0...

Stack overflow

Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long string to the 1 LOGIN or 2 SELECT command, a different set of attack vectors and possibly a...

CVE-2006-1255

CVE-2006-1255 affects Mercur Messaging / Mercur Mailserver's IMAP service (versions up to and including 5.0 SP3). The vulnerability is a stack-based buffer overflow in the IMAP command handler (LOGIN and SELECT) caused by insufficient bounds checking when copying user-supplied data, allowing remo...

CVE-2006-1255

Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long string to the 1 LOGIN or 2 SELECT command, a different set of attack vectors and possibly a...

Mercur Mailserver 5.0 SP3 (IMAP) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== Mercur Mailserver 5.0 SP3 IMAP Denial of Service Exploit ========================================================== / Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory :...

Mercur MailServer 5.0 SP3 - 'IMAP' Denial of Service

/ Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory : http://secunia.com/advisories/19267/ Coder : Omnipresent Email : [email protected] Description : Tim Taylor has discovered a vulnerability in Mercur Messaging 2005, which can be exploited by malicious people and by malicious users to cause a...

Mercur MailServer 5.0 SP3 - 'IMAP' Remote Buffer Overflow (1)

/ mercur.cpp Atrium Mercur IMAP 5.0 SP3 Messaging Multiple IMAP Commands Remote Exploit Copyright C 2006 Javaphile Group http://www.javaphile.org Exploits code by : pll Ellison.Tangatgmaildotcom Bug Reference: http://www.frsirt.com/bulletins/4332 / include include include include pragma commentli...

Mercur MailServer 5.0 SP3 - IMAP Denial of Service

Mercur MailServer 5.0 SP3 - IMAP Denial of Service / Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory : http://secunia.com/advisories/19267/ Coder : Omnipresent Email : [email protected] Description : Tim Taylor has discovered a vulnerability in Mercur Messaging 2005, which can be exploited by...

Mercur Mailserver 5.0 SP3 (IMAP) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================================== Mercur Mailserver 5.0 SP3 IMAP Remote Buffer Overflow Exploit =============================================================== / mercur.cpp Atrium Mercur IMAP 5.0 SP3 Messaging...

Mercur Mailserver 5.0 SP3 (IMAP) Denial of Service Exploit

No description provided by source. / Exploit for : IMAP 5.0 SP3 DoS Exploit Advisory : http://secunia.com/advisories/19267/ Coder : Omnipresent Email : [email protected] Description : Tim Taylor has discovered a vulnerability in Mercur Messaging 2005, which can be exploited by malicious people...

Mercur Mailserver 5.0 SP3 (IMAP) Remote Buffer Overflow Exploit

No description provided by source. / mercur.cpp Atrium Mercur IMAP 5.0 SP3 Messaging Multiple IMAP Commands Remote Exploit Copyright C 2006 Javaphile Group http://www.javaphile.org Exploits code by : pll Ellison.Tangatgmaildotcom Bug Reference: http://www.frsirt.com/bulletins/4332 / include stdio...

[Full-disclosure] Mercur IMAPD 5.0 SP3 DoS Exploit or more?

Hi folks, I found this bugs in a imap-server called Mercur IMAP 5.0 SP3 from http://www.atrium-software.com/, but i was not able to exploit it successful for a remote shell on WinXP ServicePack2. The program has an intern check for the string length or something like that. I can overwrite the EIP...

MERCUR Mailserver buffer overflow

Buffer overflow in configuration interface TCP/32000 access verification. Multiple overflows in IMAP, POP3, SNTP protocol...

Mercur Messaging 2005 IMAP Login Buffer Overflow

This module exploits a stack buffer overflow in Atrium Mercur IMAP 5.0 SP3. Since the room for shellcode is small, using the reverse ordinal payloads yields the best results. Module Options msf use exploit/windows/imap/mercur/login msf undefinedlogin show actions ...actions... msf undefinedlogin...

Mercur v5.0 IMAP SP3 SELECT Buffer Overflow

Mercur v5.0 IMAP server is prone to a remotely exploitable stack-based buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to a fixed size memory buffer. Credit to Tim Taylor for discover the vulnerabilit...

By the PHP imap function to bypass safe mode and open_basedir restrictions vulnerability thought-the vulnerability of early warning-the black bar safety net

Last night in the green League saw this vulnerability announcement, 2 on 2 8, released, is imapopen of the module exists on the vulnerability, a local attacker could use this vulnerability to unauthorized traversal of the mail directory, illegal create, delete, playback command file. The most...