CVE-2007-3730

The CVE-2007-3730 issue affects HP OpenVMS TCP/IP Services 5.6 (POP server) where the default configuration fails to log the source IP address and attempted username for login attempts. This logging deficiency could help remote attackers remain anonymous or avoid identification when probing or at...

CVE-2007-3730: Undefined Security Weakness

The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login attempts, which might help remote attackers to avoid identification...

CVE-2007-3729: Undefined Security Weakness

The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid POP usernames...

ViRC 2.0 (JOIN Response) Remote SEH Overwrite Exploit 0day

No description provided by source. !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC -----...

Mozilla Foundation Security Advisory 2007-15

Title: Security Vulnerability in APOP Authentication Impact: Moderate Announced: May 30, 2007 Reporter: Gatan Leurent Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 1.5.0.12 Thunderbird 2.0.0.4 SeaMonkey 1.0.9 SeaMonkey 1.1.2 Description Gatan Leurent informed us of a weakness in APOP...

eudora-seh-overwrite.txt

!/usr/bin/python Eudora 7.1 IMAP FLAGS 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Eudora 7.1.0.9 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe Details:.. Eudora -- SELECT IMBOX --------- IMAP server Eudora -- FLAGS ..AAAA... ----...

Fedora Core 6 : evolution-data-server-1.8.3-6.fc6 (2007-484)

This update fixes a security vulnerability in APOP authentication. This only affects POP mail accounts. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

IncrediMail IMMenuShellExt ActiveX Control Buffer Overflow Exploit

No description provided by source. !-- =============================================================================================== IncrediMail IMMenuShellExt ActiveX Control Buffer Overflow Exploit By Umesh Wanve...

GLSA-200703-08 : SeaMonkey: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200703-08 SeaMonkey: Multiple vulnerabilities Tom Ferris reported a heap-based buffer overflow involving wide SVG stroke widths that affects SeaMonkey. Various researchers reported some errors in the JavaScript engine potentially...

SeaMonkey: Multiple vulnerabilities

Background The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the 'Mozilla Application Suite'. Description Tom Ferris reported a heap-based buffer overflow involving wide SVG stroke widths that affects SeaMonke...

GLSA-200703-04 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200703-04 Mozilla Firefox: Multiple vulnerabilities Tom Ferris reported a heap-based buffer overflow involving wide SVG stroke widths that affects Mozilla Firefox 2 only. Various researchers reported some errors in the JavaScript...

devhelp, seamonkey security update

CentOS Errata and Security Advisory CESA-2007:0077 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 February 2007...

uTorrent 1.6 Remote Heap Overflow Exploit PoC

No description provided by source. / This is a PoC remote exploit for uTorrent 1.6 Author: defsec [email protected] http://www.defacedsecurity.com Works on XP SP1 and w2k sp1-4 / include stdio.h include stdlib.h define NASIZE 4880 unsigned char niceannounceNASIZE;...

Imail 8.10-8.12 (RCPT TO) Remote Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

CVE-2006-6605

Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command...

CVE-2006-6605

This CVE (CVE-2006-6605) affects MailEnable POP3 service: a stack-based buffer overflow in handling the PASS command allows remote, unauthenticated attackers to execute arbitrary code. A boundary/overflow occurs when processing an overly long PASS argument, potentially enabling code execution wit...

CVE-2006-6605

Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command...