Ipswitch WhatsUp Professional 2006 - Remote Denial of Service

source: https://www.securityfocus.com/bid/16771/info Ipswitch WhatsUp Professional 2006 is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle certain HTTP GET requests. This issue allows remote attackers to consume excessive...

CVE-2005-1939: Undefined Security Weakness

Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." dot dot sequences in a request to the Report service TCP 8022...

CVE-2005-1939

Ipswitch WhatsUp Small Business (2004) has a directory traversal vulnerability in the Report service (TCP 8022). The issue stems from insufficient sanitization of HTTP requests, allowing an unauthenticated user to read arbitrary files on the target host by crafting requests with .. sequences. The...

CVE-2005-1939

Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." dot dot sequences in a request to the Report service TCP 8022...

IMail IMAP LOGIN special character vulnerability

Added: 01/04/2006 CVE: CVE-2005-1255 BID: 13727 OSVDB: 16804 Background IMail is a mail server for Windows platforms. It includes SMTP, POP, IMAP, and LDAP services, a web interface, and web calendaring. Problem A remote attacker could execute arbitrary commands by sending a long specially crafte...

IMail IMAP LOGIN special character vulnerability

Added: 01/04/2006 CVE: CVE-2005-1255 BID: 13727 OSVDB: 16804 Background IMail is a mail server for Windows platforms. It includes SMTP, POP, IMAP, and LDAP services, a web interface, and web calendaring. Problem A remote attacker could execute arbitrary commands by sending a long specially crafte...

CVE-2005-3526

Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrary code via a long FETCH command...

CVE-2005-1939

Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." dot dot sequences in a request to the Report service TCP 8022...

Ipswitch Collaboration Suite / IMail SMTPD Multiple Commands Format String

The remote host is running Ipswitch Collaboration Suite or IMail Server, commercial messaging and collaboration suites for Windows. The version of Ipswitch Collaboration Suite / IMail server installed on the remote host contains an SMTP server that suffers from a format string flaw. By supplying ...

IPSwitch Imail mail server DoS

Uninitialized memory access on oversized IMAP LIST command argument...

[Full-disclosure] iDEFENSE Security Advisory 12.06.05: Ipswitch IMail IMAP List Command DoS Vulnerability

Ipswitch IMail IMAP List Command DoS Vulnerability iDEFENSE Security Advisory 12.06.05 www.idefense.com/application/poi/display?id=347&type=vulnerabilities December 6, 2005 I. BACKGROUND Ipswitch Imail Server is an email server that is part of the IpSwitch Collaboration suit. Imail Supports POP3,...

[Full-disclosure] iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability

Ipswitch Collaboration Suite SMTP Format String Vulnerability iDEFENSE Security Advisory 12.06.05 www.idefense.com/application/poi/display?id=346&type=vulnerabilities December 6, 2005 I. BACKGROUND Ipswitch Collaboration Suite provides e-mail and real-time collaboration, calendar and contact list...

CVE-2005-2923

The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to cause a denial of service crash via a long argument to the LIST command, which causes IMail Server to reference invalid memory...

CVE-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

CVE-2005-2923

The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to cause a denial of service crash via a long argument to the LIST command, which causes IMail Server to reference invalid memory...

EUVD-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...

CVE-2005-2923

CVE-2005-2923 affects Ipswitch’s IMail Server IMAP service (IP: Ipswitch Collaboration Suite). The vulnerability lies in the IMAP LIST command handling: when a long LIST argument (~8000 bytes) is processed, the server can reference invalid memory, leading to a crash (DoS). This requires authentic...

CVE-2005-2931

Ipswitch Collaboration Suite / IMail Server 8.20 (ICS) is affected by a format-string vulnerability in the SMTP server that allows remote attackers to execute arbitrary code via crafted input to the EXPN, MAIL, MAIL FROM, or RCPT TO commands. The issue stems from improper handling of format speci...

Ipswitch IMail Format String and 'LIST' Command DoS

Binary data 3317.prm...

CVE-2005-2931: Undefined Security Weakness

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the 1 EXPN, 2 MAIL, 3 MAIL FROM, and 4 RCPT TO commands...