Kerio MailServer 5.6.3 list Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio MailServer 5.6.3 list Module - Overflow

Kerio MailServer 5.6.3 list Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs...

Kerio WebMail < 5.7.7 Multiple Vulnerabilities

The remote host is running version 5 of the Kerio MailServer. There are multiple flaws in this interface that could allow an attacker with a valid webmail account on this host to obtain a shell on this host or to perform a cross-site-scripting attack against this host with a version prior to 5.6....

Kerio MailServer 5.6.3 subscribe Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio MailServer 5.6.3 add_acl Module - Overflow

Kerio MailServer 5.6.3 addacl Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occur...

Kerio MailServer 5.6.3 add_acl Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio MailServer 5.6.3 do_map Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio MailServer 5.6.3 - Web Mail ADD_ACL Module Cross-Site Scripting

source: https://www.securityfocus.com/bid/7966/info Reportedly, Kerio Mailserver is vulnerable to a cross site-scripting attack. The vulnerability is present in the addacl module of the Kerio Mailserver web mail component. An attacker may exploit this vulnerability by enticing a victim user to...

Kerio MailServer 5.6.3 - Web Mail DO_MAP Module Cross-Site Scripting

source: https://www.securityfocus.com/bid/7968/info Reportedly, Kerio Mailserver is vulnerable to a cross site-scripting attack. The vulnerability is present in the domap module of the Kerio Mailserver web mail component. An attacker may exploit this vulnerability by enticing a victim user to...

CVE-2002-1434

Multiple cross-site scripting XSS vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs...

CVE-2002-1433

Kerio MailServer 5.0 allows remote attackers to cause a denial of service hang via SYN packets to the supported network services...

CVE-2002-1434

Multiple cross-site scripting XSS vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs...

CVE-2002-1433

Kerio MailServer 5.0 allows remote attackers to cause a denial of service hang via SYN packets to the supported network services...

CVE-2002-1434

CVE-2002-1434 corresponds to multiple cross-site scripting (XSS) vulnerabilities in the Web Mail module of Kerio MailServer 5.0. The collected documents specify that remote attackers could cause HTML/script execution as other users by exploiting certain URLs in the WebMail interface. The OpenVAS/...

CVE-2002-1433

CVE-2002-1433 affects Kerio MailServer 5.0. The vulnerability allows remote attackers to cause a denial-of-service (hang) by sending SYN packets to the supported network services. The available records (NVD/CVE listings) describe the issue and its impact as a network-based DoS, but do not provide...

CVE-2002-1073

Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password...

CVE-2002-1073

Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password...

CVE-2002-1073

CVE-2002-1073 describes a buffer overflow in the control service of MERCUR Mailserver 4.2, allowing remote attackers to execute arbitrary code via a long password. The vulnerability is documented in CVE databases (NVD/CVE) with a CVSS v2 base score of 7.5 (HIGH) and remote network access without ...

Kerio MailServer 5.05.1 Web Mail - Multiple Cross-Site Scripting Vulnerabilities

Kerio MailServer 5.05.1 Web Mail - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/5507/info Reportedly, Kerio Mailserver is vulnerable to cross site scripting attacks. The vulnerability is present in Kerio Mailserver's web mail component. An attacker may...

Kerio MailServer 5.0/5.1 Web Mail - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/5507/info Reportedly, Kerio Mailserver is vulnerable to cross site scripting attacks. The vulnerability is present in Kerio Mailserver's web mail component. An attacker may exploit this vulnerability by causing a victim user to follow a malicious link...