CVE-1999-1551

The CVE-1999-1551 entry relates to a buffer overflow in Ipswitch IMail Service 5.0. The vulnerability is triggered by a long URL, allowing an attacker to cause a denial of service (crash) and potentially execute arbitrary commands. The connected documents confirm the affected product and the unde...

CVE-1999-1557

Buffer overflow in the login functions in IMAP server imapd in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a long user name or 2 a long password...

CVE-1999-1171

IPswitch WS_FTP contains a local privilege escalation flaw: by setting the flags registry key to 1920, a local user can gain additional privileges and modify or add mail accounts. The PT-1999-1600 entry confirms this issue but does not specify affected versions, and the original CVE description m...

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 store e‑mail account passwords in registry keys using weak encryption, allowing local attackers to read passwords. Affected component: registry storage of credentials; Root cause: weak cryptography. Impact: local confidentiality and integrity compromise. CVSS base score...

CVE-1999-1170: Undefined Security Weakness

IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920...

CVE-1999-1171: Undefined Security Weakness

IPswitch WSFTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920...

CVE-1999-1497: Undefined Security Weakness

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts...

CVE-1999-1551: Undefined Security Weakness

Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service crash and possibly execute arbitrary commands via a long URL...

CVE-1999-1557: Undefined Security Weakness

Buffer overflow in the login functions in IMAP server imapd in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a long user name or 2 a long password...

CVE-2001-0494

Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header...

CVE-2001-0039

IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes...

CVE-2001-0039

IPSwitch IMail SMTP Buffer Overflow affects the IMail SMTP daemon (versions

CVE-2001-0039: Undefined Security Weakness

IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes...

CVE-2001-0039

IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes...

DoS by SMTP AUTH command in IPSwitch IMail server

Dear folks, I found a kind of DoS to handle SMTP AUTH command in IPSwitch IMail server version 6.0.5. IPSwitch ships a product titled IMail, an email server for usage on NT servers serving SMTP, POP3, IMAP4, LDAP etc. It supports SMTP AUTH commands RFC2554 and several authenticate methods to...

CVE-2000-0780

The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. dot dot attack...

CVE-2000-0301

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...

CVE-2000-0780

The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. dot dot attack...

CVE-2000-0780

The CVE-2000-0780 entry concerns the IPSWITCH IMail web server (versions 6.04 and earlier) vulnerable to a directory-traversal (dot-dot) attack that allows remote attackers to read and delete arbitrary files. The vulnerability is described as affecting the web server component, with impact descri...

CVE-2000-0780: Undefined Security Weakness

The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. dot dot attack...