61 matches found
postmaster.txt
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Postmaster 4.2.2 build 3.2.5 multiple vulnerabilities + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ http://www.woppoware.com.au/ date: 9 May 2005 Severity: High Systems Affected: Microsoft Windows NT 4.0 all...
CVE-2005-1652
message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to bypass authentication by modifying the email parameter...
CVE-2005-1651
The CVE-2005-1651 entry concerns Woppoware PostMaster 4.2.2 (build 3.2.5). The vulnerability is a directory traversal in the message.htm page, exploitable via .. in the wmm parameter, allowing an attacker to determine the existence of arbitrary files on the remote host. This is framed as a partia...
CVE-2005-1653
Woppoware PostMaster 4.2.2 (build 3.2.5) is affected by a Cross-site Scripting (XSS) vulnerability in the message.htm page due to unsanitized input in the email parameter. This allows remote attackers to inject arbitrary web script or HTML. Root cause: improper input sanitization in the email par...
CVE-2005-1650
The CVE-2005-1650 entry applies to Woppoware PostMaster 4.2.2, where the web mail service returns different error messages based on whether a user exists. This behavior allows remote attackers to enumerate valid usernames, constituting an information disclosure issue. The Red Hat and CVE records ...
CVE-2005-1653
Cross-site scripting XSS vulnerability in message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2005-1652
CVE-2005-1652 affects Woppoware PostMaster 4.2.2 (build 3.2.5). Affected component: message.htm. Root cause: remote authentication bypass via modification of the email parameter, enabling attackers to bypass login and act as the targeted user (e.g., read messages, compose messages). Public refere...
CVE-2005-1652
message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to bypass authentication by modifying the email parameter...
CVE-2005-1651
Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to determine the existence of arbitrary files via a .. dot dot in the wmm parameter...
CVE-2005-1650
The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...
PT-2005-2627 · Woppoware · Woppoware Postmaster
Name of the Vulnerable Software and Affected Versions: Woppoware PostMaster version 4.2.2 Description: The web mail service in the affected software generates different error messages depending on whether a user exists or not. This allows remote attackers to determine valid usernames...
[SA15268] PostMaster Multiple Vulnerabilities
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: PostMaster Multiple Vulnerabilities SECUNIA ADVISORY I...
Woppoware Postmaster < 4.2.3 Multiple Vulnerabilities
Binary data 2896.prm...
[NT] PostMaster Cross Site Scripting Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
PostMaster 3.16/3.17 Proxy Service - Cross-Site Scripting
source: https://www.securityfocus.com/bid/9055/info PostMaster has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization that is performed by the proxy service on user-supplied data. An attacker may construct a malicious HT...
PostMaster crossite scripting
Crossite scripting on errorpage...
PostMaster 3.163.17 Proxy Service - Cross-Site Scripting
PostMaster 3.163.17 Proxy Service - Cross-Site Scripting source: https://www.securityfocus.com/bid/9055/info PostMaster has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization that is performed by the proxy service on...
CVE-2000-1153
PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...
CVE-2000-1153
PostMaster 1.0 on BeOS r5 Pro and earlier is affected by a denial-of-service vulnerability triggered by processing a message containing a long URL. The available references reiterate the same description without additional technical specifics (no details on root cause, affected versions beyond th...