1126 matches found
IPSwitch, Inc. WS_FTP Server
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: IPSwitch, Inc. WSFTP Server Versions: v3.13 dated 2002.08.07, possibly others. Severity: Medium-Hot Author: low halo [email protected] Date: October 25th, 2002 Revision: 1.0 Overview WSFTP v3.13 by IPSwitch, Inc., is vulnerable to the...
IPSwitch WS_FTP ftp bounce attack
No description provided...
CVE-2002-1077
IPSwitch IMail Web Calendaring service iwebcal allows remote attackers to cause a denial of service crash via an HTTP POST request without a Content-Length field...
CVE-2002-1077
IMail Web Calendaring service (iwebcal) in IPSwitch IMail is affected by CVE-2002-1077. A remote attacker can cause a denial of service (crash) by sending an HTTP POST request that lacks a Content-Length header. The description and connected records confirm the affected component and the vulnerab...
CVE-2002-1077: Undefined Security Weakness
IPSwitch IMail Web Calendaring service iwebcal allows remote attackers to cause a denial of service crash via an HTTP POST request without a Content-Length field...
CVE-2002-0777
Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter...
PT-2002-1846 · Ipswitch · Ws Ftp Ftp Server
Name of the Vulnerable Software and Affected Versions: WS FTP FTP Server version 3.1.1 Description: The issue allows remote authenticated users to execute arbitrary code via a long SITE CPWD command, which is a buffer overflow. This can be exploited by sending a long command to the server,...
Buffer overflow in IPSwitch IMail
Buffer overflow in LDAP and webmail subsystem...
IPSwitch IMail 6.x/7.0.x - Web Calendaring Incomplete Post Denial of Service
source: https://www.securityfocus.com/bid/5365/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. When a HTTP POST command is made to the web calendaring service on port 8484, and the...
IPSwitch IMail ADVISORY/EXPLOIT/PATCH
"In 1995, Ipswitch released IMail Server, the first commercial NT Mail Server. Seven years later there are over 49 million users of IMail worldwide. IMail Server 7.1 Greater security, improved usability, and new revenue opportunities for service providers." 7 years in development, 20 minutes of...
IPSwitch IMail 6.x7.07.1 - Web Messaging GET Buffer Overflow
IPSwitch IMail 6.x7.07.1 - Web Messaging GET Buffer Overflow // source: https://www.securityfocus.com/bid/5323/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. The web messaging serve...
IPSwitch IMail 6.x/7.0/7.1 - Web Messaging GET Buffer Overflow
// source: https://www.securityfocus.com/bid/5323/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. The web messaging server is vulnerable to a buffer overflow. When the server receive...
Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior
Date: Mon, 20 May 2002 13:24:26 -0700 From: Foundstone Labs [email protected] To: [email protected] Subject: Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior Please disregard the previous email. Can you please forward this to the bugtraq mailing list? Thanks, Marshall...
CVE-2001-1281
Web Messaging Server for Ipswitch IMail 7.04 and earlier is affected. The vulnerability allows remote authenticated users to change information for other users by modifying the olduser parameter in the Change User Information web form. Documented impact is information integrity on user data; expl...
CVE-2001-1284
Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users...
CVE-2001-1283
CVE-2001-1283 affects Ipswitch IMail webmail interface (versions 7.04 and earlier). Affected component is the webmail CGI handlers (readmail.cgi and printmail.cgi); remote authenticated users can crash the service via mailbox names containing many dots or other characters, likely due to a buffer ...
CVE-2001-1285
The CVE-2001-1285 entry describes a directory traversal vulnerability in Ipswitch IMail 7.04 and earlier, exploited via a .. (dot dot) in the mbx parameter to readmail.cgi. Affected component: readmail.cgi in Ipswitch IMail (versions ≤ 7.04). Root cause: improper validation of the mbx parameter a...
CVE-2001-1282
Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information...
CVE-2001-1282
CVE-2001-1282 affects Ipswitch IMail versions 7.04 and earlier. The flaw causes the physical path of email attachments to be recorded in the message header, enabling remote attackers to obtain potentially sensitive configuration information. The available documents do not specify the exact root c...