mailtraq-update.txt

Recently, a vulnerability was discovered by Reed Arvin in the Mailtraq 2.6.1.1677 administration console. The vendor provided solution does not fully mitigate the privilege escalation vulnerability. You will find the original vulnerability advisory and the updated work around exploit information...

Mailtraq 2.1.0.1302 - Remote Format String SMTP Resource Consumption

Mailtraq 2.1.0.1302 - Remote Format String SMTP Resource Consumption source: https://www.securityfocus.com/bid/7926/info It has been reported that Mailtraq does not reliably handle format strings in some SMTP protocol fields. This may cause a system to become unstable and crash, allowing a remote...

Mailtraq 2.1.0.1302 - Remote Format String SMTP Resource Consumption

source: https://www.securityfocus.com/bid/7926/info It has been reported that Mailtraq does not reliably handle format strings in some SMTP protocol fields. This may cause a system to become unstable and crash, allowing a remote attacker to deny service to the system. @@%s%p%n %s%p%n...

Mailtraq 2.2 - Browse.asp Cross-Site Scripting

Mailtraq 2.2 - Browse.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/7813/info Mailtraq is vulnerable to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of HTTP requests to the vulnerable Mailtraq server. An attacker can exploit this...

Mailtraq 2.2 - 'Browse.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7813/info Mailtraq is vulnerable to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of HTTP requests to the vulnerable Mailtraq server. An attacker can exploit this vulnerability by manipulating the 'cfolder' URI...

Mailtraq 2.2 - Webmail Utility Full Path Disclosure

Mailtraq 2.2 - Webmail Utility Full Path Disclosure source: https://www.securityfocus.com/bid/7815/info A vulnerability has been reported for Mailtraq that may result in the disclosure of path information. The vulnerability exists due to insufficient sanitization of HTTP requests. Specifically, a...

Mailtraq 2.2 - Webmail Utility Full Path Disclosure

source: https://www.securityfocus.com/bid/7815/info A vulnerability has been reported for Mailtraq that may result in the disclosure of path information. The vulnerability exists due to insufficient sanitization of HTTP requests. Specifically, a request for non-existent resources will result in a...