Exim < 4.76 dkim_exim_verify_finish() DKIM-Signature Header Format String

Based on its response to a specially formatted mail message, the Exim mail server listening on this port appears to be affected by a format string vulnerability. The vulnerability is due to a failure in the dkimeximverifyfinish function to properly sanitize format string specifiers in the...

Insecure Mail Server Offers Chinese Government Accounts To The Masses

A security researcher who identified holes in SCADA software used by utilities in China has issued a new warning to that country’s CERT about insecure Web infrastructure, including an e-mail server that allows any Web user to create their own Chinese government mail account. Dillon Beresford, a...

Rumble Mail Server 'MAIL FROM'命令远程拒绝服务漏洞

BUGTRAQ ID: 47070 Rumble是以ANSI C编写的邮件服务器，对大多数服务和邮件扩展实现模块化管理。 Rumble邮件服务器在"MAIL FROM"命令的实现上存在远程拒绝服务漏洞，远程攻击者可利用此漏洞造成受影响应用程序崩溃，拒绝服务合法用户。 Humbedooh Rumble 0.25.2232 厂商补丁： Rumble ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://rumbleserver.sourceforge.net/ import socket host = 'localhost...

Rumble 0.25.2232 Denial of Service Vulnerability

Exploit for windows platform in category dos / poc ------------------------------------------------------------------------ Software................Rumble 0.25.2232 Vulnerability...........Denial Of Service Threat Level............Serious 3/5...

Rumble 0.25.2232 - Denial of Service

Rumble 0.25.2232 - Denial of Service ------------------------------------------------------------------------ Software................Rumble 0.25.2232 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://humbedooh.users.sourceforge.net/...

Rumble 0.25.2232 - Denial of Service

------------------------------------------------------------------------ Software................Rumble 0.25.2232 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://humbedooh.users.sourceforge.net/ Discovery Date..........3/27/2011 Tested...

DEBIAN-CVE-2011-1429

Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766...

[SECURITY] Fedora 14 Update: clamav-0.97-1400.fc14

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

RedHat Update for exim RHSA-2010:0970-01

Check for the Version of exim OpenVAS Vulnerability Test RedHat Update for exim RHSA-2010:0970-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Exim string_format() buffer overflow

Overview The Exim mail server contains a buffer overflow that could allow a remote attacker to execute arbitrary code on an affected system. Description Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. The internal...

Exim alternate configuration privilege escalation vulnerability

Overview A vulnerability in the way that the Exim mail server handles configuration files may allow a local attacker to gain escalated privileges on an affected system. Description Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to t...

RHEL 4 / 5 : exim (RHSA-2010:0970)

Updated exim packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability...

Critical: Red Hat Security Advisory: exim security update

Updated exim packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability...

[SECURITY] Fedora 13 Update: clamav-0.96.4-1300.fc13

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

CVE-2010-3460

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...

CVE-2010-3459

Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary files via a %5C encoded backslash in the URL...

CVE-2010-3459

Cross-site scripting XSS vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3459

CVE-2010-3459 is an XSS vulnerability in AXIGEN Mail Server’s Ajax WebMail interface, affecting versions before 7.4.2. Practical impact: remote attackers may inject arbitrary script/HTML via unspecified vectors. Remediation: upgrade to AXIGEN 7.4.2 or later. No exploitation details are provided i...