2034 matches found
CVE-2004-2503
INweb Mail Server 2.40 is affected. The issue allows remote attackers to cause a denial of service (crash) by a large number of connect/disconnect actions to the POP3 and SMTP services. The provided sources do not detail root cause or a patch; exploitation info is not stated. Remediation details ...
MerakXSS.txt
ShineShadow Security Report 30092005-06 TITLE: Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting- edge Merak Mail Server Instant Antispam and much more, is the fastest,...
CVE-2005-3132
MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlistinc.html, which reveals the path in an error message...
CVE-2005-3131
Multiple cross-site scripting XSS vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to blank.html, or the createdataCX parameter to 2 calendard.html, 3...
CVE-2005-3133
Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to 1 delete arbitrary files or directories via a relative path to the id parameter to logout.html or 2 include arbitrary PHP files or other...
CVE-2005-3132
CVE-2005-3132 affects MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 (and possibly earlier). The vulnerability allows remote attackers to obtain sensitive information by directly requesting bwlist_inc.html, causing an error message that reveals the path. Impact is partial confidentiality di...
CVE-2005-3133
Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to 1 delete arbitrary files or directories via a relative path to the id parameter to logout.html or 2 include arbitrary PHP files or other...
CVE-2005-3131
Multiple cross-site scripting XSS vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to blank.html, or the createdataCX parameter to 2 calendard.html, 3...
CVE-2005-3133
Observation: CVE-2005-3133 describes multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 (and possibly earlier versions). The issues allow remote attackers to: (1) delete arbitrary files or directories via a relative path supplied to the id paramet...
CVE-2005-3131
Summary (CVE-2005-3131) : Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 (and possibly earlier) allow remote attackers to inject arbitrary web script or HTML. The issues arise via the (1) id parameter to blank.html and (2) createdataCX ...
CVE-2005-3132
MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlistinc.html, which reveals the path in an error message...
Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1
ShineShadow Security Report 30092005-06 TITLE: Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting- edge Merak Mail Server Instant Antispam and much more, is the fastest,...
Merak Mail Server 8.2.4 r - Arbitrary File Deletion
Merak Mail Server 8.2.4 r - Arbitrary File Deletion source: https://www.securityfocus.com/bid/14988/info Merak Mail Server is affected by an arbitrary file deletion vulnerability. This issue arises due to an input validation error allowing an attacker to delete files in the context of the Web...
Merak Mail Server 8.2.4 r - Arbitrary File Deletion
source: https://www.securityfocus.com/bid/14988/info Merak Mail Server is affected by an arbitrary file deletion vulnerability. This issue arises due to an input validation error allowing an attacker to delete files in the context of the Web server running the application. An attacker can exploit...
Courier mail server crossite scripting
Internet Explorer Conditional Comments crossite scripting with sqwebmail...
Mercury/32 Mail Server 4.01a (Pegasus) - IMAP Buffer Overflow
/ Mercury imap4 server remote buffer overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not available right now company address : www.pmail.com timeline : ...
Mercury32 Mail Server 4.01a (Pegasus) - IMAP Buffer Overflow
Mercury32 Mail Server 4.01a Pegasus - IMAP Buffer Overflow / Mercury imap4 server remote buffer overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not...
USN-174-1: courier vulnerability
A Denial of Service vulnerability has been discovered in the Courier mail server. Due to a flawed status code check, failed DNS domain name service queries for SPF sender policy framework were not handled properly and could lead to memory corruption. A malicious DNS server could exploit this to...
[SECURITY] [DSA 784-1] New courier packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 784-1 [email protected] http://www.debian.org/security/ Martin Schulze August 25th, 2005 http://www.debian.org/security/faq -...
