Kerio MailServer 5.0/5.1 Web Mail Multiple Cross Site Scripting Vulnerabilities

No description provided by source...

Kerio MailServer 5.6.3 - Remote Buffer Overflow Exploit

No description provided by source. / Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid...

Kerio MailServer 5.6.3 Web Mail DO_MAP Module Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7968/info Reportedly, Kerio Mailserver is vulnerable to a cross site-scripting attack. The vulnerability is present in the domap module of the Kerio Mailserver web mail component. An attacker may exploit this vulnerabilit...

Kerio MailServer 5.6.3 Web Mail ADD_ACL Module Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7966/info Reportedly, Kerio Mailserver is vulnerable to a cross site-scripting attack. The vulnerability is present in the addacl module of the Kerio Mailserver web mail component. An attacker may exploit this vulnerabili...

Kerio Mailserver 5.6.3 add_acl Module Overflow

No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...

Kerio MailServer 5.x/6.x Remote LDAP Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21091/info Kerio MailServer is prone to a denial-of-service vulnerability due to a flaw when handling malformed network traffic. Successful exploits will result in denial-of-service conditions. !/usr/bin/env python kms1.p...

Kerio Mailserver 5.6.3 subscribe Module Overflow

No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...

Kerio Products 'STARTTLS' Plaintext Command Injection Vulnerability

The host is running Kerio Mail Server/Connect and is prone to plaintext command injection vulnerability. OpenVAS Vulnerability Test $Id: secpodkerioproductsstarttlscmdinjvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Kerio Products 'STARTTLS' Plaintext Command Injection Vulnerability Authors: Soora...

Multiple Kerio Products Administration Console File Disclosure and Corruption Vulnerability

Multiple Kerio Products are prone to a file disclosure and corruption vulnerability. An attacker can exploit this vulnerability to gain access to files and corrupt data on a vulnerable computer. This may aid in further attacks. Kerio MailServer up to and including version 6.7.3 as well as Kerio...

Kerio MailServer / Connect < 7.0.1 Administration Console File Disclosure and File Corruption Vulnerability

Binary data 5561.prm...

Kerio MailServer WebMail 'Integration' Page XSS Vulnerability

The host is running Kerio MailServer and is prone to Cross-Site Scripting vulnerability OpenVAS Vulnerability Test $Id: gbkeriomailserverxssvulnaug09.nasl 4869 2016-12-29 11:01:45Z teissa $ Kerio MailServer WebMail 'Integration' Page XSS Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

Kerio MailServer WebMail 'Integration' Page XSS Vulnerability

Kerio MailServer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross site scripting

Cross-site scripting XSS vulnerability in the Integration page in the WebMail component in Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0 allows remote attackers to inject arbitrary web script or HTML via an e-mail message...

CVE-2009-2636

Kerio MailServer WebMail usion page vulnerability CVE-2009-2636 is a cross-site scripting (XSS) flaw in the WebMail integration page. Affects Kerio MailServer 6.6.0, 6.6.1, 6.6.2, and 6.7.0. Exploitation allows an attacker to inject arbitrary web script or HTML via an e-mail message, with impact...

Kerio MailServer < 6.6.2 Patch 3 / 6.7.0 Patch 1 XSS (KSEC-2009-06-08-01)

According to its banner, the remote host is running a version of Kerio MailServer prior to 6.6.2 Patch 3 or 6.7.0 Patch 1. The webmail component of such versions is reportedly affected by a cross-site scripting vulnerability on the Integration page. Successful exploitation of this issue could lea...

Kerio Mail Server Multiple Cross Site Scripting vulnerabilities

Kerio Mail Server is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Kerio Mail Server Multiple Cross Site Scripting vulnerabilities

The host is running Kerio Mail Server and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbkeriomailservermultxssvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Kerio Mail Server Multiple Cross Site Scripting vulnerabilities Authors: Chandan S Copyright:...

Kerio MailServer/Connect Detection (HTTP, SMTP, POP3, IMAP, NNTP)

This script will detect the version of Kerio MailServer or Connect on the remote host. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-5769

Multiple cross-site scripting XSS vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 folder parameter to mailCompose.php or the 2 daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 folder parameter to mailCompose.php or the 2 daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party...