CVE-2008-5734

IceWarp Merak Mail Server Web Mail (IceWarp Merak Mail Server 9.3.2) is affected by CVE-2008-5734: an XSS flaw where an IMG tag in HTML emails is not sanitized, allowing a remote attacker to inject arbitrary script/HTML into a user’s browser. Root cause: improper sanitization of IMG HTML tag inpu...

IceWarp Merak Mail Server < 9.4.0 IMG Tag XSS

Binary data 4800.prm...

Merak Mail Server邮件消息HTML注入漏洞

BUGTRAQ ID: 32969 Merak Email Server是一个全面的办公室局域网或Internet通讯邮件解决方案。 Merak Mail Server没有正确地过滤邮件消息中的IMG HTML标签便显示给了用于，如果攻击者发送了恶意邮件的话，当用户查看邮件时就会导致在浏览器会话中注入并执行任意HTML和脚本代码。 Icewarp Merak Mail Server 9.3.2 Icewarp ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.icewarp.com/...

MDaemon WorldClient < 10.0.2 Script Injection

Binary data 4765.prm...

[SECURITY] Fedora 9 Update: clamav-0.93.3-2.fc9

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

libspf2 DNS TXT record parsing buffer overflow

Overview libspf2 contains a buffer overflow vulnerability in code that parses DNS TXT records. Description libspf2 is a widely-deployed implementation of the Sender Policy Framework. According to RFC 4408: An SPF record is a DNS Resource Record RR that declares which hosts are, and are not,...

SMTP settings

Various settings for SMTP parameters used during SMTP/Mail Server scanning. SPDX-FileCopyrightText: 2008 Michel Arboi and Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

libspf2-parsing.txt

Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and almost...

NoticeWare E-mail Server 5.1.2.2 (POP3) Pre-Auth DoS Exploit

No description provided by source. !/usr/bin/python Software: NoticeWare E-mail Sever POP3 5.1.2.2 Pre-Auth DoS Discovered and Coded by: Paul Hand aka rAWjAW Blog: http://rawjaw-security.blogspot.com E-mail: phand3754atgmaildotcom Description: NoticeWare E-mail Server has many odd querks about it...

NoticeWare E-mail Server 5.1.2.2 (POP3) Pre-Auth DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================ NoticeWare E-mail Server 5.1.2.2 POP3 Pre-Auth DoS Exploit ============================================================ !/usr/bin/python Software: NoticeWare E-mail Sever POP3 5.1.2.2...

Noticeware E-mail Server 5.1.2.2 - 'POP3' Denial of Service

!/usr/bin/python Software: NoticeWare E-mail Sever POP3 5.1.2.2 Pre-Auth DoS Discovered and Coded by: Paul Hand aka rAWjAW Blog: http://rawjaw-security.blogspot.com E-mail: phand3754gmailcom Description: NoticeWare E-mail Server has many odd querks about it This DoS leverages the fact that the PO...

Privilege escalation: User is able to add a page to his watchlist without having the permission

Szenario: create user1 and user2 user1 has access to space1 user2 has access to space2 user1 can add a page to his watchlist by manipulating using a proxy like webscarab the postrequest to http://localhost:8080/dwr/exec/PageNotification.startWatching.dwr and replacing the id contained in paramete...

CVE-2008-4041

The IMAP server in Softalk Mail Server formerly WorkgroupMail 8.5.1.431 allows remote authenticated users to cause a denial of service resource consumption and daemon crash via a long IMAP APPEND command with certain repeated parameters...

CVE-2008-4041

CVE-2008-4041 affects the Softalk Mail Server (formerly WorkgroupMail) IMAP server, version 8.5.1.431. The issue enables remote authenticated users to cause a denial of service by issuing a long IMAP APPEND command with certain repeated parameters, leading to resource consumption and daemon crash...

CVE-2008-4041

The IMAP server in Softalk Mail Server formerly WorkgroupMail 8.5.1.431 allows remote authenticated users to cause a denial of service resource consumption and daemon crash via a long IMAP APPEND command with certain repeated parameters...

Softalk Mail Server 'APPEND'命令远程拒绝服务漏洞

BUGTRAQ ID: 30970 CNCAN ID：CNCAN-2008090309 Softalk Mail Server是一款邮件服务程序。 Softalk Mail Server IMAP服务不正确处理APPEND命令，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 提交特殊构建的APPEND命令给IMAP服务处理，可导致应用程序崩溃。 Softalk Mail Server 8.5.1 目前没有解决方案提供： http://www.softalkltd.com/ A001 LOGIN user password A01 APPEND Ax5000 UIDNEXT...

Softalk Mail Server IMAP Denial of Service Vulnerability

Softalk Mail Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Softalk Mail Server 8.5.1 - 'APPEND' Remote Denial of Service

source: https://www.securityfocus.com/bid/30970/info Softalk Mail Server is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to crash the affected application, denying servic...

[AJECT] Softalk IMAP Server 8.5.1 DoS vulnerability

---------------------------------------- Synopsis ---------------------------------------- Softalk IMAP Server 8.5.1 is vulnerable to denial-of-service DoS attacks. The IMAP server crashes when processing an APPEND command with a strange parameter see details bellow. Other commands may also trigg...

Postfix mail server hardlinks privilege escalation

It's possible to cause Postfix to deliver mail to system file by using hardlinks to symlink available against standard in Linux, IRIX, Solaris...