CVE-2005-2151

spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework SPF records, which could allow attackers to cause memory corruption...

CVE-2005-2151

spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework SPF records, which could allow attackers to cause memory corruption...

Courier Mail Server < 0.50.1 DNS SPF Record Lookup Failure Memory Corruption DoS

The remote host is running Courier Mail Server, an open source mail server for Linux and Unix. According to its banner, the installed version of Courier is prone to a remote denial of service vulnerability triggered when doing Sender Policy Framework SPF data lookups. To exploit this flaw, an...

Courier Mail Server < 0.50.1 SPF Data Lookup Remote DoS

Binary data 3048.prm...

Courier Mail Server memory coruuption

Memory corruption on SPF DNS records processing...

[SA15901] Courier Mail Server Memory Corruption Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2002-1893

Cross-site scripting XSS vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message...

CVE-2002-1893

CVE-2002-1893: Cross-site scripting (XSS) in ArGoSoft Mail Server Pro 1.8.1.9 lets remote attackers inject arbitrary web script/HTML via the e-mail message. Connected sources confirm the vulnerability exists in the WebMail interface of ArGoSoft Mail Server Pro, but the provided documents do not i...

e-Post SPA-PRO mail server buffer overflow

Buffer overflow in IMAP login command...

CVE-2005-1682

JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage constructor in javax.mail.internet.InternetHeaders, which allows remote authenticated users to read other users' e-mail messages by modifying the msgno parameter. NOTE...

CVE-2005-1682

The CVE describes a vulnerability in JavaMail API used by Solstice Internet Mail Server POP3 2.0, where the MimeMessage constructor in javax.mail.internet.InternetHeaders does not properly validate the message number, enabling remote authenticated users to read other users’ e‑mail by altering the...

CVE-2005-1682

JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage constructor in javax.mail.internet.InternetHeaders, which allows remote authenticated users to read other users' e-mail messages by modifying the msgno parameter. NOTE...

CVE-2005-1491

CVE-2005-1491 affects Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. The issue allows remote authenticated users to perform file operations: (1) move their home directory via viewaction.html and (2) move arbitrary files via the importaction.html importfile parameter. The root cause is a vul...

CVE-2005-1491

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to 1 move their home directory via viewaction.html or 2 move arbitrary files via the importfile parameter to importaction.html...

CVE-2005-1490

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html...

CVE-2005-1490

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html...

CVE-2005-1491

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to 1 move their home directory via viewaction.html or 2 move arbitrary files via the importfile parameter to importaction.html...

CVE-2005-1490

CVE-2005-1490 (Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2) : When the mailbox.dat file does not exist, remote authenticated users can determine whether a file exists by using the folder parameter to attachment.html. The affected components are Merak Mail Server 8.0.3 and Icewarp Web Mail...

CVE-2005-1488

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 contains multiple cross-site scripting (XSS) vulnerabilities. Remote authenticated users can inject arbitrary web script or HTML through four input paths: (1) E-mail address, Note, or Public Certificate fields to address.html, (2) addressaction....

CVE-2005-1488

Multiple cross-site scripting XSS vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authenticated users to inject arbitrary web script or HTML via 1 the E-mail address, Note, or Public Certificate fields to address.html, 2 addressaction.html, 3 the Signature fiel...