1960 matches found
CVE-2005-1283
Summary : CVE-2005-1283 describes multiple directory traversal vulnerabilities in ArGoSoft Mail Server Pro 1.8.7.6. Remote authenticated users can read arbitrary files via the UIDL parameter to the msg script or copy/move the user’s .eml file to arbitrary locations via the delete script. This is ...
CVE-2005-1284
The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request...
CVE-2005-1283
Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...
CVE-2005-1282
Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...
CVE-2005-1284
CVE-2005-1284 affects ArGoSoft Mail Server Pro 1.8.7.6; the addnew script allows remote attackers to create arbitrary accounts via a direct HTTP POST, even when web-interface account creation is disabled. This is a network‑level issue with CVSS2 base score 7.5 (HIGH). No exploit details or remedi...
ArGoSoft Mail Server Pro <= 1.8.7.6 Multiple Vulnerabilities (XSS, Traversal, Priv Esc)
The version of ArGoSoft Mail Server Pro installed on the remote host suffers from several vulnerabilities, including : - Unauthenticated Account Creation Vulnerability The application does not authenticate requests sent through the web interface before creating mail accounts and may create them...
Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6
ShineShadow Security Report 22042005-04 TITLE: Multiple vulnerabilities in Argosoft Mail Server Pro 1.8.7.6. BACKGROUND ArGoSoft Mail Server is fully functional SMTP/POP3/Finger Pro version also has IMAP module server for Windows 95/98/NT/2000, which will let you turn your computer into the email...
CVE-2005-1283
Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...
ArGoSoft Mail Server Multiple Vulnerabilities
Binary data 2847.prm...
CVE-2004-1088
Postfix server for Apple Mac OS X 10.3.6 vulnerable when using CRAM-MD5: remote attackers can send mail without authentication by replaying authentication information. Reported CVSSv2 base score 7.5 (HIGH) with network attack vector and low attack complexity. The provided documents do not specify...
CommuniGate Pro mail server DoS
Bug in LIST module multipart messages handling...
Smail-3 < 3.2.0.121 Multiple Vulnerabilities
According to its banner, the remote host is running as its mail server S-mail version 3.2.0.120 or older. Such versions contain various vulnerabilities that may allow an unauthenticated attacker execute arbitrary code on the remote host by exploiting a heap overflow by sending a malformed argumen...
[SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities
SIG^2 Vulnerability Research Advisory SurgeMail Webmail Attachment Upload and XSS Vulnerabilities by Tan Chew Keong Release Date: 23 Mar 2005 ADVISORY URL http://www.security.org.sg/vuln/surgemail22g3.html SUMMARY SurgeMail http://netwinsite.com/surgemail/ is a next generation Mail Server -...
MailEnable mail server format string bug
Format string bug in SMTP MAIL FROM: command...
NotifyLink server provides inadequate protection for cryptographic key material
Overview The NotifyLink key exchange protocol contains a vulnerability that significantly reduces the strength of cryptographic keys used to encrypt mail messages. Description Notify Technology NotifyLink Enterprise Server allows users to synchronize e-mail between a PDA and a mail server. The...
NotifyLink contains multiple SQL injection vulnerabilities
Overview There are multiple vulnerabilities in NotifyLink that allow unauthenticated remote users to view or modify the contents of the NotifyLink SQL database. Possible modifications include the addition of unauthorized user and administrator accounts. Description Notify Technology NotifyLink...
IPSwitch IMAIL Mail server IMAP buffer overflow
Buffer overflow in IMAP DELETE and EXAMINE commands...
Eudora Internet Mail Server for Mac OS USER Overflow
The remote poppassd daemon crashes when a too long name is sent after the USER command. It might be possible for a remote attacker to run arbitrary code on this machine. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17295; scriptversion"1.14";...