217 matches found
CVE-2008-1498
CVE-2008-1498 is a stack-based buffer overflow in the IMAP LIST command of NetWin Surgemail, affecting 3.8k4-4 and earlier. Remote authenticated users could execute arbitrary code via a long first argument to LIST. Exploitation is documented (see Exploit-DB link in references). No patch/version o...
CVE-2008-1497
CVE-2008-1497 and related CVEs describe a stack-based buffer overflow in NetWin Surgemail IMAP service. CVE-2008-1497 affects SurgeMail 38k4-4 and earlier, allowing remote authenticated users to execute arbitrary code via long arguments to the LSUB command. Related entries (CVE-2008-7182 and CVE-...
CVE-2008-1497
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...
NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit
No description provided by source. !/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 200...
netwin-list.txt
!/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 2000 SP4 English Windows XP Sp2 Englis...
NetWin Surgemail 3.8k4-4 - IMAP (Authenticated) Remote LIST Universal
NetWin Surgemail 3.8k4-4 - IMAP Authenticated Remote LIST Universal !/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows...
NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit
Exploit for unknown platform in category remote exploits ===================================================================== NetWin Surgemail 3.8k4-4 IMAP post-auth Remote LIST Universal Exploit ===================================================================== !/usr/bin/python NetWin...
NetWin Surgemail 3.8k4-4 - IMAP (Authenticated) Remote LIST Universal
!/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 2000 SP4 English Windows XP Sp2 Englis...
Stack overflow
Stack-based buffer overflow in the libspawnusergetpid function in 1 swatch.exe and 2 surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via an HTTP request with multiple long heade...
CVE-2008-1052
The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service daemon crash via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails...
Format string
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in the page parameter...
CVE-2008-1055
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in the page parameter...
CVE-2008-1054
NetWin SurgeMail 38k4 and earlier (including swatch.exe and surgemail.exe; webmail.exe and unspecified CGI executables) are affected by a stack-based buffer overflow in the _lib_spawn_user_getpid function. The overflow is triggered by an HTTP request with multiple long headers, causing an overflo...
CVE-2008-1055
CVE-2008-1055 describes a format string vulnerability in NetWin SurgeMail’s webmail.exe components (versions 38k4 and earlier; beta 39a) and WebMail 3.1s and earlier. The flaw, triggered via the page parameter, can cause a denial of service (daemon crash) and may allow arbitrary code execution by...
CVE-2008-1055
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via format string specifiers in the page parameter...
CVE-2008-1052
The CVE-2008-1052 entry concerns NetWin SurgeFTP, specifically versions 2.3a2 and earlier. The issue is a remote denial of service: when an attacker sends a crafted large Content-Length HTTP header, memory exhaustion leads to a NULL pointer dereference and a daemon crash. The description does not...
CVE-2008-1052
The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service daemon crash via a large integer in the Content-Length HTTP header, which triggers a NULL pointer dereference when memory allocation fails...
SurgeFTP Content-Length参数空指针引用拒绝服务漏洞
BUGTRAQ ID: 27993 SurgeFTP是一款FTP服务程序，提供管理接口程序。 SurgeFTP的过程Web管理接口处理畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 如果客户端发送了Content-Length参数的话，SurgeFTP会试图根据这个字段所指定的数量分配内存（最多为2147483647字节），然后将数据拷贝到所生成的缓冲区。由于对分配结果缺少检查，如果无法分配所指定数量内存的话，就可能在拷贝期间触发空指针引用，导致整个服务器崩溃。 NetWin SurgeFTP = 2.3a2 厂商补丁： NetWin ------...
SurgeMail Page命令远程格式串处理漏洞
BUGTRAQ ID: 27990 SurgeMail是下一代的邮件服务器，可运行在Windows NT/2K或UNIX平台上，支持所有的标准IMAP、POP3、SMTP、SSL和ESMTP协议。 SurgeMail中用于处理webmail接口（webmail.exe）的CGI存在安全漏洞，远程攻击者可能利用此漏洞控制服务器。 CGI中用于在请求错误页面时构建错误消息的函数未经验证格式参数便直接将其传送给了lvprintf： "TPL: Failed to Locate Template c:\surgemail\webmail\panel%s%s%s%s%s%s.tpl2=No suc...