217 matches found
CVE-2000-0611
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service...
NetWin dMailWeb Denial of Service
Product: NetWin dMailWeb Type: Denial of Service Severity: Moderate Versions: = 2.6j: potential buffer overflow in pophost not fixed = 2.6i: pophost DOS fixed by 2.6j = 2.6g: username DOS fixed by 2.6i Note: NetWin cwMail is also vulnerable to the same attacks, and appears to be using exactly the...
CVE-2000-0608
NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter pophost...
CVE-2000-0609
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter...
CVE-2000-0422
CVE-2000-0422 : Buffer overflow in the Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. Affected component: Netwin DMailWeb CGI. Impact: arbitrary command execution; no patch/mitigation details are provided in the supplied documents. E...
CVE-2000-0423
The CVE-2000-0423 entry describes a vulnerability in Netwin DNEWSWEB CGI where a buffer overflow allows remote attackers to execute arbitrary commands by supplying long values for parameters such as group, cmd, and utag. Affected component is the DNEWSWEB CGI program; root cause is a buffer overf...
CVE-2000-0422
Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter...
CVE-2000-0423
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag...
NetWin DSMTP (Dmail) ETRN Command Overflow
The remote SMTP server is vulnerable to a buffer overflow when the ETRN command is issued arguments which are too long. A remote attacker could exploit this to crash the SMTP server, or possibly execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...
Netwin's Dmail package
I've been sitting on this for a while, but dsmtp Part of the dmail package by NetWin, http://www.netwinsite.com has a buffer overflow in the ETRN command, causing the server to crash and dump core. I've contacted NetWin and they are working on the problem, but 3 new Betas have been released since...
CVE-2000-0490
Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request...
NetWin DMail 2.72.8 - ETRN Buffer Overflow
NetWin DMail 2.72.8 - ETRN Buffer Overflow // source: https://www.securityfocus.com/bid/1297/info NetWin's DMail is an alternative mail-server solution for unix and NT servers. There is a buffer overflow vulnerability in the server daemon that could allow remote attackers to execute arbitrary...
CISADV000505.txt
Cerberus Information Security Advisory CISADV000505 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 5th May 2000 Name : DNewsweb Buffer Overflow Affected Systems : nix/Win32 Web Servers running Dnewsweb Issue : Attackers can remotely execute arbitrary code Author : Mark Litchfield...
CISADV000504.txt
Cerberus Information Security Advisory CISADV000504 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 4th May 2000 Name : Dmailweb Buffer Overflow Affected Systems : nix/Win32 Web Servers running Issue : Attackers can remotely execute arbitrary code Author : David Litchfield...
CVE-2000-0423
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag...
Alert: DNewsWeb buffer overflow
Cerberus Information Security Advisory CISADV000505 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 5th May 2000 Name : DNewsweb Buffer Overflow Affected Systems : nix/Win32 Web Servers running Dnewsweb Issue : Attackers can remotely execute arbitrary code Author : Mark Litchfield...