1936 matches found
CVE-2005-1284
CVE-2005-1284 affects ArGoSoft Mail Server Pro 1.8.7.6; the addnew script allows remote attackers to create arbitrary accounts via a direct HTTP POST, even when web-interface account creation is disabled. This is a network‑level issue with CVSS2 base score 7.5 (HIGH). No exploit details or remedi...
ArGoSoft Mail Server Pro <= 1.8.7.6 Multiple Vulnerabilities (XSS, Traversal, Priv Esc)
The version of ArGoSoft Mail Server Pro installed on the remote host suffers from several vulnerabilities, including : - Unauthenticated Account Creation Vulnerability The application does not authenticate requests sent through the web interface before creating mail accounts and may create them...
Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6
ShineShadow Security Report 22042005-04 TITLE: Multiple vulnerabilities in Argosoft Mail Server Pro 1.8.7.6. BACKGROUND ArGoSoft Mail Server is fully functional SMTP/POP3/Finger Pro version also has IMAP module server for Windows 95/98/NT/2000, which will let you turn your computer into the email...
CVE-2005-1283
Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...
ArGoSoft Mail Server Multiple Vulnerabilities
Binary data 2847.prm...
CVE-2004-1088
Postfix server for Apple Mac OS X 10.3.6 vulnerable when using CRAM-MD5: remote attackers can send mail without authentication by replaying authentication information. Reported CVSSv2 base score 7.5 (HIGH) with network attack vector and low attack complexity. The provided documents do not specify...
CommuniGate Pro mail server DoS
Bug in LIST module multipart messages handling...
Smail-3 < 3.2.0.121 Multiple Vulnerabilities
According to its banner, the remote host is running as its mail server S-mail version 3.2.0.120 or older. Such versions contain various vulnerabilities that may allow an unauthenticated attacker execute arbitrary code on the remote host by exploiting a heap overflow by sending a malformed argumen...
[SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities
SIG^2 Vulnerability Research Advisory SurgeMail Webmail Attachment Upload and XSS Vulnerabilities by Tan Chew Keong Release Date: 23 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/surgemail22g3.html SUMMARY SurgeMail http://netwinsite.com/surgemail/ is a next generation Mail Server -...
MailEnable mail server format string bug
Format string bug in SMTP MAIL FROM: command...
NotifyLink server provides inadequate protection for cryptographic key material
Overview The NotifyLink key exchange protocol contains a vulnerability that significantly reduces the strength of cryptographic keys used to encrypt mail messages. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The...
NotifyLink contains multiple SQL injection vulnerabilities
Overview There are multiple vulnerabilities in NotifyLink that allow unauthenticated remote users to view or modify the contents of the NotifyLink SQL database. Possible modifications include the addition of unauthorized user and administrator accounts. Description Notify Technology NotifyLink...
IPSwitch IMAIL Mail server IMAP buffer overflow
Buffer overflow in IMAP DELETE and EXAMINE commands...
Eudora Internet Mail Server for Mac OS USER Overflow
The remote poppassd daemon crashes when a too long name is sent after the USER command. It might be possible for a remote attacker to run arbitrary code on this machine. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17295; scriptversion"1.14";...
FoxMail Mail server buffer overflow
Buffer overflow on SMTP "MAIL FROM:" and "USER" command...
CVE-2004-1721
CVE-2004-1721 affects Merak Mail Server 5.2.7, where the (1) function.php or (2) function.view.php scripts allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000. This is a PHP source disclosure/information exposure vulnerability, enabling an attacker to obtain...
CVE-2004-1722
CVE-2004-1722: SQL injection in Merak Mail Server 5.2.7’s calendar.html allows remote attackers to execute arbitrary SQL via the schedule parameter. Public records confirm the affected product/version and the SQLi impact; no additional exploit details are provided in the supplied documents beyond...
CVE-2004-1720
CVE-2004-1720 concerns Merak Mail Server 5.2.7 where an invalid HTTP request on address.html (and possibly calendar.html) can reveal the installation path via web logs or responses. The NVD entry notes partial confidentiality impact with a base score of 5.0 (MEDIUM). Connected documents also desc...
