217 matches found
CVE-2000-0611
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service...
NetWin dMailWeb Denial of Service
Product: NetWin dMailWeb Type: Denial of Service Severity: Moderate Versions: = 2.6j: potential buffer overflow in pophost not fixed = 2.6i: pophost DOS fixed by 2.6j = 2.6g: username DOS fixed by 2.6i Note: NetWin cwMail is also vulnerable to the same attacks, and appears to be using exactly the...
CVE-2000-0609
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter...
CVE-2000-0608
NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter pophost...
CVE-2000-0422
CVE-2000-0422 : Buffer overflow in the Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. Affected component: Netwin DMailWeb CGI. Impact: arbitrary command execution; no patch/mitigation details are provided in the supplied documents. E...
CVE-2000-0422
Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter...
CVE-2000-0423
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag...
CVE-2000-0423
The CVE-2000-0423 entry describes a vulnerability in Netwin DNEWSWEB CGI where a buffer overflow allows remote attackers to execute arbitrary commands by supplying long values for parameters such as group, cmd, and utag. Affected component is the DNEWSWEB CGI program; root cause is a buffer overf...
NetWin DSMTP (Dmail) ETRN Command Overflow
The remote SMTP server is vulnerable to a buffer overflow when the ETRN command is issued arguments which are too long. A remote attacker could exploit this to crash the SMTP server, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...
Netwin's Dmail package
I've been sitting on this for a while, but dsmtp Part of the dmail package by NetWin, http://www.netwinsite.com has a buffer overflow in the ETRN command, causing the server to crash and dump core. I've contacted NetWin and they are working on the problem, but 3 new Betas have been released since...
CVE-2000-0490
Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request...
NetWin DMail 2.72.8 - ETRN Buffer Overflow
NetWin DMail 2.72.8 - ETRN Buffer Overflow // source: https://www.securityfocus.com/bid/1297/info NetWin's DMail is an alternative mail-server solution for unix and NT servers. There is a buffer overflow vulnerability in the server daemon that could allow remote attackers to execute arbitrary...
CISADV000505.txt
Cerberus Information Security Advisory CISADV000505 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 5th May 2000 Name : DNewsweb Buffer Overflow Affected Systems : nix/Win32 Web Servers running Dnewsweb Issue : Attackers can remotely execute arbitrary code Author : Mark Litchfield...
CISADV000504.txt
Cerberus Information Security Advisory CISADV000504 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 4th May 2000 Name : Dmailweb Buffer Overflow Affected Systems : nix/Win32 Web Servers running Issue : Attackers can remotely execute arbitrary code Author : David Litchfield...
CVE-2000-0423
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag...
Alert: DNewsWeb buffer overflow
Cerberus Information Security Advisory CISADV000505 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 5th May 2000 Name : DNewsweb Buffer Overflow Affected Systems : nix/Win32 Web Servers running Dnewsweb Issue : Attackers can remotely execute arbitrary code Author : Mark Litchfield...