STARTTLS plaintext command injection vulnerability

Overview Some STARTTLS implementations could allow a remote attacker to inject commands during the plaintext phase of the protocol. Description STARTTLS is an extension to plaintext communication protocols that offers a way to upgrade a plaintext connection to an encrypted TLS or SSL connection...

Ipswitch TFTP Server Directory Traversal

Added: 02/16/2011 BID: 50890 OSVDB: 77455 Background Ipswitch makes software for businesses to manage networks, securely transfer files, and communicate via e-mail. They also provide some free network tools, including a TFTP server. Problem The Ipswitch TFTP Server version 1.0.0.24 has a director...

Ipswitch TFTP Server Directory Traversal

Added: 02/16/2011 BID: 50890 OSVDB: 77455 Background Ipswitch makes software for businesses to manage networks, securely transfer files, and communicate via e-mail. They also provide some free network tools, including a TFTP server. Problem The Ipswitch TFTP Server version 1.0.0.24 has a director...

Ipswitch TFTP Server Directory Traversal

Added: 02/16/2011 BID: 50890 OSVDB: 77455 Background Ipswitch makes software for businesses to manage networks, securely transfer files, and communicate via e-mail. They also provide some free network tools, including a TFTP server. Problem The Ipswitch TFTP Server version 1.0.0.24 has a director...

Ipswitch TFTP Server Directory Traversal

Added: 02/16/2011 BID: 50890 OSVDB: 77455 Background Ipswitch makes software for businesses to manage networks, securely transfer files, and communicate via e-mail. They also provide some free network tools, including a TFTP server. Problem The Ipswitch TFTP Server version 1.0.0.24 has a director...

Ipswitch WS_FTP Server 5.03 - MKD Overflow (Metasploit)

$Id: wsftpserver503mkd.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Month Of Abysssec Undisclosed Bugs - Ipswitch Imail Server

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | To: To Person """ ReplayCount = 5 while ReplayCount0: message = message + "Reply-To:" counter = 3 while counter0: if counter != 50000 : message = message + "," message = message + "Reply-To: " message = message +...

Ipswitch Imail Server List Mailer Reply-To Address Memory Corruption

Exploit for windows platform in category dos / poc ==================================================================== Ipswitch Imail Server List Mailer Reply-To Address Memory Corruption ==================================================================== Title : Ipswitch Imail Server List Mail...

Ipswitch Imail Server - List Mailer Reply-To Address Memory Corruption

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | To: To Person """ ReplayCount = 5 while ReplayCount0: message = message + "Reply-To:" counter = 3 while counter0: if counter != 50000 : message = message + "," message = message + "Reply-To: " message = message +...

Ipswitch Imail Server - List Mailer Reply-To Address Memory Corruption

Ipswitch Imail Server - List Mailer Reply-To Address Memory Corruption ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | To: To Person """ ReplayCount = 5 while ReplayCount0: message = message + "Reply-To:" counter = 3 while counter0: if counter != 50000 : message...

Ipswitch IMail Server Mailing List Message Subject Buffer Overflow

The Ipswitch IMail Server is a mail server product geared towards medium to large size organizations. It contains implementations of POP3, IMAP4, and SMTP servers. The SMTP server module is installed and started in a default installation. A buffer overflow vulnerability has been reported in...

ZDI-10-127: Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability

ZDI-10-127: Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-127 July 15, 2010 -- CVSS: 9, AV:N/AC:L/Au:S/C:C/I:C/A:C -- Affected Vendors: Ipswitch -- Affected Products: Ipswitch IMail -- TippingPointTM IPS Customer...

Ipswitch Imail multiple security vulnerabilities

Format string vulnerabilities, unfiltered shell-characters, code execution...

ZDI-10-126: Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability

ZDI-10-126: Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-126 July 15, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Ipswitch -- Affected Products: Ipswitch IMail -- TippingPointTM IPS...

ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability

ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-128 July 15, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Ipswitch -- Affected Products: Ipswitch IMail -- TippingPointTM IPS Custom...

Ipswitch IMail Server < 11.02 Multiple Vulnerabilities

Ipswitch IMail Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ipswitch:imailserver"...

Ipswitch IMail Server < 11.02 Multiple Vulnerabilities

Binary data 5600.prm...

Ipswitch IMail Server < 11.02 Multiple Vulnerabilities

The remote host appears to be running Ipswitch IMail Server prior to version 11.02. It is, therefore, affected by multiple issues : - By sending a specially crafted message to imailsrv.exe with multiple 'Reply-To' headers set, it may be possible for a remote, unauthenticated attacker to execute...

Ipswitch IMail Server邮件列表imailsrv.exe栈溢出漏洞

BUGTRAQ ID: 41719 Ipswitch IMail Server是Ipswitch协作组件中捆绑的一个邮件服务器。 imailsrv.exe进程用于处理发送给imailsrv的消息。如果消息标题中包含有“?Q?”运算符，则该序列之后的字符串未经长度检查便被拷贝到了本地栈缓冲区，导致执行任意代码。 如果要到达这个代码路径，邮件列表必须受口令保护（需认证情况），或之前已经配置了口令（无需认证情况）。 Ipswitch IMail 11.01 厂商补丁： Ipswitch -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Ipswitch IMail Server < 11.02 multiple Vulnerabilities

Ipswitch IMail Server Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 or any later version, as published by the Free Software Foundation. This program is...