Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IPSwitch IMail. Authentication is not required to exploit this vulnerability. The specific flaw exists within SMTPDLL.dll called by queuemgr.exe. When handling a message queued for remote delivery...

Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IPSwitch IMail List Mailer. Authentication is not required to exploit this vulnerability. The specific flaw exists within imailsrv.exe which is invoked to handle messages sent to the imailsrv. When...

Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IPSwitch IMail. Authentication might be required to exploit this vulnerability. The specific flaw exists within imailsrv.exe which is invoked to handle messages sent to the imailsrv. When a message...

IPSwitch WhatsUp Gold 8.03 - Remote Buffer Overflow (Metasploit)

$Id: ipswitchwugmaincfgret.rb 9820 2010-07-14 13:59:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Ipswitch IMail Server - IMAP SEARCH Buffer Overflow (Metasploit)

$Id: ipswitchsearch.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Ipswitch WS_FTP Server 5.05 - XMD5 Overflow (Metasploit)

$Id: wsftpserver505xmd5.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Ipswitch WS_FTP Professional < 12.2 'HTTP' Response Format String Vulnerability

Ipswitch WSFTP Professional is prone to a format string vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ipswitch WS_FTP Professional Detection (Windows SMB Login)

SMB login-based detection of Ipswitch WSFTP Professional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Format string

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

CVE-2009-4775

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

CVE-2009-4775

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

CVE-2009-4775

CVE-2009-4775 affects Ipswitch WS_FTP Professional versions earlier than 12.2. The issue is a format string vulnerability in the HTTP response handling (status code portion) that allows remote attackers to cause a denial of service by supplying crafted format specifiers. OpenVAS/Nessus entries co...

KLA10225 DoS vulnerability in WS FTP

A format string vulnerability was found in WS FTP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed format string. Original advisories - Exploitation Public exploits exist for this vulnerability...

CVE-2009-4775: Use of Externally-Controlled Format String

Format string vulnerability in Ipswitch WSFTP Professional 12 before 12.2 allows remote attackers to cause a denial of service crash via format string specifiers in the status code portion of an HTTP response...

Ipswitch WS_FTP Client Format String (CVE-2008-3734)

The Ipswitch WSFTP client is a popular file transfer client which is fully compliant with the File Transfer Protocol FTP specifications. A format string vulnerability exists in the Ipswitch WSFTP client FTP product. The vulnerability is due to the input validation flaw, when parsing a message...

Ipswitch IMail Server - IMAP4 Server (IMail 11.01) Password Decryptor

No description provided by source. !/usr/bin/python Ipswitch IMail Server - IMAP4 Server IMail 11.01 Password Decryptor Tested on: Windows XP SP3 Windows version does not matter Description: So I reverse engineered the IMail password decryption function in IMailsec.dll, located at 0x00563130. In...

Ipswitch WhatsUp Gold Web Server Buffer Overflow (CVE-2004-0798)

WhatsUp is a network management and monitoring application developedby Ipswitch Inc. It has a built-in web server to enable remote accessto the application. A vulnerability exists in the way the web server component of Ipswitch WhatsUp Gold parses HTTP requests. A buffer overflow occurs due to...

CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities &#40;reversible encryption + weak ACL&#41;

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | | |------------------------------------------------- EIP Hunters...

Ipswitch IMail Server Multiple Local Privilege Escalation Vulnerabilities

Ipswitch IMail Server is prone to multiple local privilege-escalation vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ipswitch IMail Server Multiple Local Privilege Escalation Vulnerabilities

Ipswitch IMail Server is prone to multiple local privilege-escalation vulnerabilities. Local attackers may exploit these issues to gain elevated privileges, which may lead to a complete compromise of an affected computer. IMail Server 11.01 is affected; other versions may also be vulnerable...