CVE-2009-1602

CVE-2009-1602 affects Quick 'n Easy Mail Server 3.3. It enables a remote denial-of-service through processing of multiple long SMTP commands (demonstrated via HELO). The reported impact is daemon outage or CPU consumption, with CVSS base metrics indicating a Network attack vector, low complexity,...

CVE-2009-1602

Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service daemon outage or CPU consumption via multiple long SMTP commands, as demonstrated by HELO commands...

CVE-2009-1602: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service daemon outage or CPU consumption via multiple long SMTP commands, as demonstrated by HELO commands...

Quick 'n Easy Mail Server SMTP Request Remote Denial Of Service Vulnerability

Quick 'n Easy Mail Server is prone to a denial-of-service vulnerability because it fails to adequately handle multiple socket requests. Attackers can exploit this issue to cause the affected application to reject SMTP requests, denying service to legitimate users. The demonstration release of Qui...

Quick 'n Easy Mail Server 3.3 SMTP Request Remote DoS Vulnerability

Quick SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100185";...

IceWarp Merak Mail Server 9.4.1 - cleanHTML() Cross-Site Scripting

IceWarp Merak Mail Server 9.4.1 - cleanHTML Cross-Site Scripting source: https://www.securityfocus.com/bid/34823/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections source: https://www.securityfocus.com/bid/34820/info IceWarp Merak Mail Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

IceWarp Merak Mail Server 9.4.1 - item.php Cross-Site Scripting

IceWarp Merak Mail Server 9.4.1 - item.php Cross-Site Scripting source: https://www.securityfocus.com/bid/34825/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this iss...

IceWarp Merak Mail Server 9.4.1 - Forgot Password Input Validation

IceWarp Merak Mail Server 9.4.1 - Forgot Password Input Validation source: https://www.securityfocus.com/bid/34827/info IceWarp Merak Mail Server is prone to an input-validation vulnerability because it uses client-supplied data when performing a 'Forgot Password' function. Attackers can exploit...

Quick N Easay Mail Server 3.3 Denial Of Service

--------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ When you pass a long string to the server, it checks for...

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections

source: https://www.securityfocus.com/bid/34820/info IceWarp Merak Mail Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

IceWarp Merak Mail Server 9.4.1 - 'item.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34825/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

IceWarp Merak Mail Server 9.4.1 - 'cleanHTML()' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34823/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Stack overflow

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

Quick 'n Easy Mail Server 3.3 (Demo) Remote Denial of Service PoC

No description provided by source. --------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ When you pass a long...

Quick n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)

Quick n Easy Mail Server 3.3 Demo - Remote Denial of Service PoC --------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

CVE-2009-1516: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

Quick 'n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)

--------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ When you pass a long string to the server, it checks for...