69 matches found
fetchmail -- crash when bouncing a message
Matthias Andree reports: Fetchmail contains a bug that causes itself to crash when bouncing a message to the originator or to the local postmaster. The crash happens after the bounce message has been sent, when fetchmail tries to free the dynamic array of failed addresses, and calls the free...
PostgreSQL 'postmaster' Connection Saturation DoS
Binary data 3363.prm...
Vulnerability in core server (CVE-2006-0105)
On Windows only, the postmaster will exit if too many connection requests arrive simultaneously. This does not affect existing database connections, but will prevent new connections from being established until the postmaster is manually restarted...
postmaster.txt
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Postmaster 4.2.2 build 3.2.5 multiple vulnerabilities + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ http://www.woppoware.com.au/ date: 9 May 2005 Severity: High Systems Affected: Microsoft Windows NT 4.0 all...
CVE-2005-1652
message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to bypass authentication by modifying the email parameter...
CVE-2005-1650
The CVE-2005-1650 entry applies to Woppoware PostMaster 4.2.2, where the web mail service returns different error messages based on whether a user exists. This behavior allows remote attackers to enumerate valid usernames, constituting an information disclosure issue. The Red Hat and CVE records ...
CVE-2005-1651
The CVE-2005-1651 entry concerns Woppoware PostMaster 4.2.2 (build 3.2.5). The vulnerability is a directory traversal in the message.htm page, exploitable via .. in the wmm parameter, allowing an attacker to determine the existence of arbitrary files on the remote host. This is framed as a partia...
CVE-2005-1653
Woppoware PostMaster 4.2.2 (build 3.2.5) is affected by a Cross-site Scripting (XSS) vulnerability in the message.htm page due to unsanitized input in the email parameter. This allows remote attackers to inject arbitrary web script or HTML. Root cause: improper input sanitization in the email par...
CVE-2005-1652
CVE-2005-1652 affects Woppoware PostMaster 4.2.2 (build 3.2.5). Affected component: message.htm. Root cause: remote authentication bypass via modification of the email parameter, enabling attackers to bypass login and act as the targeted user (e.g., read messages, compose messages). Public refere...
CVE-2005-1653
Cross-site scripting XSS vulnerability in message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2005-1652
message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to bypass authentication by modifying the email parameter...
CVE-2005-1651
Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to determine the existence of arbitrary files via a .. dot dot in the wmm parameter...
CVE-2005-1650
The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...
CVE-2005-1652: Undefined Security Weakness
message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to bypass authentication by modifying the email parameter...
CVE-2005-1653: Undefined Security Weakness
Cross-site scripting XSS vulnerability in message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2005-1651: Undefined Security Weakness
Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to determine the existence of arbitrary files via a .. dot dot in the wmm parameter...
PT-2005-2627 · Woppoware · Woppoware Postmaster
Name of the Vulnerable Software and Affected Versions: Woppoware PostMaster version 4.2.2 Description: The web mail service in the affected software generates different error messages depending on whether a user exists or not. This allows remote attackers to determine valid usernames...
CVE-2005-1650: Observable Discrepancy
The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...
[SA15268] PostMaster Multiple Vulnerabilities
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: PostMaster Multiple Vulnerabilities SECUNIA ADVISORY I...