322 matches found
Haraka Remote Command Execution
!/usr/bin/python Exploit Title: Harakiri ShortDescription: Haraka comes with a plugin for processing attachments. Versions before 2.8.9 can be vulnerable to command injection Exploit Author: xychix xychix at hotmail.com / mark at outflank.nl Date: 26 January 2017 Category: Remote Code Execution...
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM5109.nasl 9124 2018-03-17 14:24:35Z cfischer $ IT-Grundschutz, 14. EL, Maßnahme 5.109 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone...
IceWarp Universal WebMail /admin/inc/include.php Multiple Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites. An attacker can explo...
Kerio Mailserver 5.6.3 list Module Overflow
No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...
Kerio MailServer 5.6.3 Web Mail DO_MAP Module Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7968/info Reportedly, Kerio Mailserver is vulnerable to a cross site-scripting attack. The vulnerability is present in the domap module of the Kerio Mailserver web mail component. An attacker may exploit this vulnerabilit...
Kerio MailServer 5.0/5.1 Web Mail Multiple Cross Site Scripting Vulnerabilities
No description provided by source...
Kerio MailServer 5.x/6.x Remote LDAP Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21091/info Kerio MailServer is prone to a denial-of-service vulnerability due to a flaw when handling malformed network traffic. Successful exploits will result in denial-of-service conditions. !/usr/bin/env python kms1.p...
Atrium Software Mercur Mailserver 3.3/4.0/4.2 IMAP AUTH Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8861/info A problem has been reported in MERCUR Mailserver when handling the IMAP AUTH command. The issue occurs when an overly long command is submitted, which may be due to a buffer overrun. This problem may make it...
Kerio Mailserver 5.6.3 add_acl Module Overflow
No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...
Kerio MailServer 5.6.3 - Remote Buffer Overflow Exploit
No description provided by source. / Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid...
Kerio MailServer 5.6.3 Web Mail ADD_ACL Module Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7966/info Reportedly, Kerio Mailserver is vulnerable to a cross site-scripting attack. The vulnerability is present in the addacl module of the Kerio Mailserver web mail component. An attacker may exploit this vulnerabili...
Kerio Mailserver 5.6.3 do_map Module Overflow
No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...
Kerio Mailserver 5.6.3 subscribe Module Overflow
No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...
IceWarp Universal WebMail /mail/include.html - Crafted HTTP_USER_AGENT Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites. An attacker can explo...
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95071 Stand: 13. Ergänzungslieferung 13. EL...
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95071 Stand: 13. Ergänzungslieferung 13. EL...
SMTP Open Relay Detection
This module tests if an SMTP server will accept via a code 250 an e-mail by using a variation of testing methods. Some of the extended methods will try to abuse configuration or mailserver flaws. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2011-5149
Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 testaddr or 2 testpass parameter to auth-settings.php; 3 hostname, 4 domainname, or 5 mailserver parameter to setup-relay.php; or 6 subnetmask or...
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver
IT-Grundschutz M5.109: Einsatz eines E-Mail-Scanners auf dem Mailserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95071 Diese Prüfung bezieht sich auf die 12...