Mercury/32 Mail Server 4.01a (Pegasus) - IMAP Buffer Overflow

/ Mercury imap4 server remote buffer overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not available right now company address : www.pmail.com timeline : ...

USN-174-1: courier vulnerability

A Denial of Service vulnerability has been discovered in the Courier mail server. Due to a flawed status code check, failed DNS domain name service queries for SPF sender policy framework were not handled properly and could lead to memory corruption. A malicious DNS server could exploit this to...

[SECURITY] [DSA 784-1] New courier packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 784-1 [email protected] http://www.debian.org/security/ Martin Schulze August 25th, 2005 http://www.debian.org/security/faq -...

DSA-784-1 courier - programming error

Bulletin has no description...

CVE-2004-2446

Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." dot dot sequences in unknown vectors...

CVE-2004-2447

CVE-2004-2447 is a cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01. The issue allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to six endpoints: viewmail.tagz, the index script under /user/, members.tagz, general.tagz, advanced.tagz, ...

CVE-2004-2447

Cross-site scripting XSS vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to 1 viewmail.tagz, 2 the index script under /user/, 3 members.tagz, 4 general.tagz, 5 advanced.tagz, or 6 list.tagz...

CVE-2004-2446

CVE-2004-2446 describes a directory traversal vulnerability in 1st Class Mail Server 4.01, enabling remote attackers to read arbitrary files via dot-dot sequences. The initial records indicate the affected product and impact (read access to files) but do not provide exploit vectors, affected vers...

CVE-2004-2375

Vulnerability CVE-2004-2375 affects the POP3 server in 1st Class Mail Server 4.0. A buffer overflow can be triggered by an APOP USER command with an excessively long second parameter (digest), potentially causing a denial of service and possibly allowing arbitrary code execution. Documented in CV...

HexView Security Advisory 0405-20-05.05

ShineShadow Security Report 04052005-05 TITLE: Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest,...

GLSA-200507-21 : fetchmail: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200507-21 fetchmail: Buffer Overflow fetchmail does not properly validate UIDs coming from a POP3 mail server. The UID is placed in a fixed length buffer on the stack, which can be overflown. Impact : Very long UIDs returned from ...

MDaemon Content Filter Traversal Arbitrary File Write

According to its banner, the version of MDaemon on the remote host is prone to a directory traversal flaw that can be exploited to overwrite files outside the application's quarantine directory provided MDaemon's attachment quarantine feature is enabled. %NASLMINLEVEL 70300 C Tenable Network...

Multiple MDaemon mail server vulnerabilities

DoS on incomlete CRAM-MD4 handshake, buffer overflow on IMAP CREATE command...

Hosting Controller <= 6.1 HotFix 2.2 Add Domain without Quota Exploit

No description provided by source. !-- Change url /str0ke -- form method="post" name="addform" action="http://url/admin/iis/IISActions.asp?ActionType=AddSite&hostcustid=1&hostingplans=1" table tr class="looplistingDark" td width="19%" class="Contents"Website Name : /td td width="73%"...

Lotus Notes mail server crossite scripting

HTML attachment content is not filtered in Web interface...

PHPXMAIL - Authentication Bypass

Author: Stefan Lochbihler Date: 6. Juli 2005 Affected Software: PHPXMAIL Software Version: 0.7 - 1.1 Software URL: http://phpxmail.sourceforge.net/ Attack: Authentication Bypass Overview: PhpXmail is a web based management software for the Xmail mail server written in php. It's main usage is as a...

CVE-2005-2151

spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework SPF records, which could allow attackers to cause memory corruption...

DEBIAN-CVE-2005-2151

spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework SPF records, which could allow attackers to cause memory corruption...

CVE-2005-2151

spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework SPF records, which could allow attackers to cause memory corruption...

CVE-2005-2151

The CVE-2005-2151 issue affects Courier MTA where SPF DNS failures were not handled properly, potentially enabling memory corruption. Public descriptions across Debian and Ubuntu advisories confirm a remote programming error in Courier’s SPF handling, with SPF checks disabled by default on many s...