WinGate Mail Server DoS

IMAP LIST command resources exhaustion...

Qbik WinGate 6.2.2 - LIST Remote Denial of Service

Qbik WinGate 6.2.2 - LIST Remote Denial of Service source: https://www.securityfocus.com/bid/30606/info WinGate is prone to a remote denial-of-service vulnerability affecting the application's IMAP email server. Exploiting this issue will consume computer resources and deny access to legitimate...

NoticeWare Email Server DoS

Crash on oversized IMAP LOGIN command...

[AJECT] NoticeWare IMAP Email Server 4.6.2 DoS vulnerability

---------------------------------------- Synopsis ---------------------------------------- NoticeWare Email Server NG 4.6.2 is vulnerable to denial-of-service DoS attacks. The IMAP server crashes after receiving several large LOGIN messages. Product: NoticeWare Email Server NG Version: 4.6.3 and...

[AJECT] WinGate Email Server (IMAP) vulnerability

---------------------------------------- Synopsis ---------------------------------------- WinGate is vulnerable to denial-of-service DoS attacks caused probably by a resource exhaustion vulnerability. The IMAP server ceases to provide access to its clients after processing a LIST command with a...

Qbik WinGate 6.2.2 - 'LIST' Remote Denial of Service

source: https://www.securityfocus.com/bid/30606/info WinGate is prone to a remote denial-of-service vulnerability affecting the application's IMAP email server. Exploiting this issue will consume computer resources and deny access to legitimate users. WinGate 6.2.2 is vulnerable; other versions m...

CVE-2008-3449

MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service crash via multiple IMAP connection requests to the same folder...

CVE-2008-3449

CVE-2008-3449 affects MailEnable Professional 3.5.2 and MailEnable Enterprise 3.52, where the MailEnable IMAP server can be triggered to crash under load by multiple simultaneous IMAP connections to the same folder, causing a denial of service. The OpenVAS/Nessus entries reference a remediation: ...

CVE-2008-3449

MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service crash via multiple IMAP connection requests to the same folder...

MailEnable IMAP连接远程拒绝服务漏洞

BUGTRAQ ID: 30498 MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable处理畸形请求时存在漏洞，如果远程攻击者对同一文件夹创建了大量的IMAP连接的话，就可能导致邮件服务器崩溃。 MailEnable 3.52 MailEnable ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mailenable.com/hotfix/ME-10042.EXE...

MailEnable IMAP Connection Saturation Remote DoS (ME-10042)

The IMAP server bundled with the version of MailEnable installed on the remote host reportedly may crash under load when there are multiple connections to the same folders. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33810; scriptversion"1.13"; scriptcvsdate"Date:...

UoW IMAP Server LSUB Buffer Overflow

This module exploits a buffer overflow in the 'LSUB' command of the University of Washington IMAP service. This vulnerability can only be exploited with a valid username and password. This module requires Metasploit: https://metasploit.com/download Current source:...

SurgeMail IMAP Service 'APPEND'命令远程缓冲区溢出漏洞

BUGTRAQ ID: 30000 CNCAN ID：CNCAN-2008070103 Surgemail是一款邮件服务程序。 Surgemail处理'APPEND'命令存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 提交超长字符串作为'APPEND'命令，可触发IMAP服务崩溃，造成缓冲区溢出，可能以应用程序权限执行任意指令。 NetWin SurgeMail 3.9e 目前没有详细解决方案提供： http://www.rss-aggregator.com/ http://www.sebug.net/exploit/3999...

Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS

No description provided by source. !/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = '\x41' 30...

httpd: mod_imagemap XSS

Cross-site scripting XSS vulnerability in the 1 modimap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the 2 modimagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

httpd cross-site scripting flaw in mod_imap

Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...

surgemail-dos.txt

!/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = '\x41' 3000 s.connect'192.168.0.103',143...

Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)

Surgemail 39e-1 - Authenticated IMAP Remote Buffer Overflow Denial of Service PoC !/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s =...

Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)

!/usr/bin/python Surgemail version 39e-1 - 0day Post Auth IMAP Buffer overflow DoS. Discovered by: Travis Warren The IMAP service contains a buffer overflow in the APPEND command. import socket s = socket.socketsocket.AFINET, socket.SOCKSTREAM buffer = '\x41' 3000 s.connect'192.168.0.103',143...

SurgeMail IMAP Service APPEND Command Remote DoS

According to its banner, the remote host is running a version of the SurgeMail Mail Server older than 3.9g2. The IMAP service in such versions is reportedly affected by remote denial of service vulnerabilities when handling an APPEND command with a large parameter. An authenticated attacker can...