Symantec Brightmail AntiSpam Multiple Vulnerabilities

SUMMARY Multiple vulnerabilities have been reported in Symantec Brightmail AntiSpam. Confidential system information can be read or modified by combining these issues. Risk Impact Medium Remote | Yes ---|--- Local | No Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS...

CVE-2006-0631

The CVE-2006-0631 issue is a CRLF injection vulnerability in mailback.pl of Erik C. Thauvin mailback. An attacker can craft Subject header newline characters to modify mail headers, potentially abusing mailback as a spam proxy and altering recipient addresses. The provided documents do not specif...

Symantec AntiVirus Decomposition Buffer Overflow

SUMMARY Symantec is aware of a buffer overflow in its AntiVirus component used to decompose RAR Roshal Archive. A specially crafted RAR file could potentially cause this buffer overflow to occur and possibly execute hostile content from the RAR file on the targeted system. Risk Impact High Remote...

Symantec Brightmail AntiSpam: Nested Zip File, Denial of Service

SUMMARY Risk Impact Low Remote Access | Yes incoming mail ---|--- Local Access | No Authentication Required | No Exploit publicly available | NA AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- Symantec Brightmail AntiSpam | 6.0 | 1 | Update Symantec Brightmail AntiSpam | 6....

JAWmail XSS

JAWmail XSS PROGRAM: JAWmail VENDOR: Rudi Benkovic [email protected] et al. HOMEPAGE: http://www.jawmail.org/ VULNERABLE VERSIONS: 1.0-rc1, possibly others IMMUNE VERSIONS: 2.0-rc1 and later LOGIN REQUIRED: no SEVERITY: high DESCRIPTION: JAWmail Just Another Web Mail is a pretty ambitious web mail...

CVE-1999-1554

/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users...

CVE-2000-0085

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag...

siteserver.directmail.passwd.txt

From: The Hidden Subject: SiteServerSS 3.0 Direct MailDM, Password in jobs When you create a DM job in SS it creates a file at the following location. \Machine\TMLBQueue\Schedule\ The file is binary with embedded UNICODE text. If you open the file with notepad you can see the account name and...

Security Update for Windows Mail for Windows Vista (KB941202)

A security issue has been identified in Windows Mail that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...