132 matches found
Ipswitch IMail Server < 8.13.0 Multiple Vulnerabilities
Binary data 2257.prm...
Ipswitch IMail Server < 8.13.0 Multiple Vulnerabilities
Binary data 2256.prm...
CVE-2004-0297
IMail LDAP Service Buffer Overflow (CVE-2004-0297) affects Ipswitch IMail Server’s LDAP daemon (iLDAP.exe 3.9.15.10) and can be triggered by a crafted LDAP message with a large tag length, enabling remote code execution or denial of service. Public details describe that the vulnerability arises f...
CVE-2004-0297
Buffer overflow in the Lightweight Directory Access Protocol LDAP daemon iLDAP.exe 3.9.15.10 in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service crash and execute arbitrary code via an LDAP message with a large tag length...
IpSwitch IMail Server <= ver 8.1 User Password Decryption
Hi fellaz, IpSwitch IMail Server version up to 8.1 uses weak encryption algorithm to encrypt its user passwords. Have a look at attached proof of concept tool, which will decrypt user password from local machine instantly. --- G:xploitsimaildecrypt G:xploitsimaildecryptimailpwdump -d --= IpSwitch...
Imailpwdump.cpp
/ IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In order to decrypt user password we need a key. IMail uses usernam...
IPSwitch IMail Server <= 8.1 Local Password Decryption Utility
Exploit for unknown platform in category local exploits ============================================================== IPSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. Th...
IPSwitch IMail Server 8.1 - Local Password Decryption Utility
/ IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In order to decrypt user password we need a key. IMail uses usernam...
Vulnerabilities in Ipswitch IMail Server 7.04
Hi all, There are a couple of vulnerabilities in Ipswitch IMail Server 7.04. In the POP3 Server If you enter a valid username the reply is: +OK welcome On the other hand, if you enter a username that doesn't exist on the server the reply is: +OK send your password This gives you a way to probe fo...
DoS by SMTP AUTH command in IPSwitch IMail server
Dear folks, I found a kind of DoS to handle SMTP AUTH command in IPSwitch IMail server version 6.0.5. IPSwitch ships a product titled IMail, an email server for usage on NT servers serving SMTP, POP3, IMAP4, LDAP etc. It supports SMTP AUTH commands RFC2554 and several authenticate methods to...
Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow
Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow // source: https://www.securityfocus.com/bid/8621/info It has been reported that Ipswitch IMail server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bound...
Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow
// source: https://www.securityfocus.com/bid/8621/info It has been reported that Ipswitch IMail server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bounds checking performed when handling malicious SMTP HELO command...