1946 matches found
Sky Communications Skyfull 1.1.4 Mail Server MAIL FROM Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/759/info The Skyfull mail server version 1.1.4 has an unchecked buffer into which the argument from the MAIL FROM command is placed. This buffer can be overwritten and arbitrary code can be executed...
Hosting Controller <= 6.1 HotFix 2.2 Add Domain without Quota Exploit
No description provided by source. !-- Change url /str0ke -- form method=post name=addform action=http://url/admin/iis/IISActions.asp?ActionType=AddSite&hostcustid=1&hostingplans=1 table tr class=looplistingDark td width=19% class=ContentsWebsite Name : /td td width=73% class=contents input...
TABS MailCarrier 2.51 - SMTP EHLO Overflow
No description provided by source. $Id: mailcarriersmtpehlo.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Softalk Mail Server 8.5.1 'APPEND' Command Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30970/info Softalk Mail Server is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to crash the...
ArGoSoft 1.8.x Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7608/info A vulnerability has been reported for ArGoSoft Mail Server FreeWare version. The problem occurs due to the FreeWare version of ArGoSoft failing to carry out sufficient authentication before granting access to th...
1st Class Mail Server 4.0 1 members.tagz XSS
No description provided by source. source: http://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reporte...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)
No description provided by source. source: http://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP mail from command, the POP3 user command and the IMAP login command. T...
Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)
No description provided by source. source: http://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP mail from command, the POP3 user command and the IMAP login command. T...
Multiple MicroWorld eScan Products Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with...
Hastymail 1.x IMAP SMTP Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20424/info Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An authenticated malicious user could execute arbitrary IMAP / SMTP commands o...
Merak Mail Server 7.4.5 calendar.html schedule Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10966/info The webmail package embedded in Merak Mail Server is reported prone to multiple vulnerabilities. The vulnerabilities reported are: - Multiple cross-site scripting vulnerabilities - An HTML injection vulnerabili...
Merak Mail Server 7.4.5 settings.html Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10966/info The webmail package embedded in Merak Mail Server is reported prone to multiple vulnerabilities. The vulnerabilities reported are: - Multiple cross-site scripting vulnerabilities - An HTML injection vulnerabili...
IceWarp Universal WebMail /admin/inc/include.php Multiple Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites. An attacker can explo...
Merak Mail Server 7.4.5 attachment.html attachmentpage_text_error Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10966/info The webmail package embedded in Merak Mail Server is reported prone to multiple vulnerabilities. The vulnerabilities reported are: - Multiple cross-site scripting vulnerabilities - An HTML injection vulnerabili...
FloosieTek FTGatePro 1.22 Mail Server Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8528/info FloosieTek FTGatePro Mail Server is prone to a cross-site scripting vulnerability. A remote attacker could exploit this issue by enticing a legitimate user of the mail server to follow a malicious link with...
Alt-N MDaemon 6.x/WorldClient Form2Raw Raw Message Handler Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9317/info It has been reported that MDaemon/WorldClient mail server may be prone to a buffer overflow vulnerability when handling certain messages with a 'From' field of over 249 bytes. This issue may allow a remote...
Code-Crafters Ability Mail Server 1.18 errormsg Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10695/info Ability Mail Server is reported prone to multiple vulnerabilities that may allow a remote attacker to carry out cross-site scripting and denial of service attacks. The server is prone to a cross-site scripting...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (2nd)
No description provided by source. / Hosting Controller = v6.1 exploit sileHOSTCxpl This exploit utilize two ways for exploiting vulnerability present into Hosting Controller. This exploit create new user with relative passwd and registered your host with mail server into Hosting Controller...
Floosietek FTGate 2.1 Web File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/280/info A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files. Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the status of...
CacheFlow CacheOS 4.1.10016 HTTP HOST Proxy Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8584/info Malicious HTTP HOST header field can be used on CacheOS to tunnel arbitrary TCP connections through a HTTP request. It has been reported that CacheFlow CacheOS may allow the misuse of the HOST header value. This...