MailEnable APPEND命令畸形参数远程缓冲区溢出漏洞

MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable处理超长畸形的命令时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 远程攻击者可以通过向MailEnable发送超长APPEND命令及参数触发缓冲区溢出，导致执行任意指令。 MailEnable MailEnable Professional Edition 2.37 MailEnable MailEnable Professional Edition 2.35 MailEnable MailEnable Professional Edition 2.33 MailEnable MailEnab...

CVE-2006-7078

Multiple cross-site scripting XSS vulnerabilities in Professional Home Page Tools Login Script, as of July 2006, allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 vorname, and 3 nachname parameters in the register script. NOTE: some details have been obtained from...

MailEnable ProfessionalEnterprise 2.37 - APPEND Remote Buffer Overflow

MailEnable ProfessionalEnterprise 2.37 - APPEND Remote Buffer Overflow !/usr/bin/perl maildisable-v4.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Wed Nov 29 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32...

MailEnable Professional/Enterprise <= 2.37 Denial of Service Exploit

No description provided by source. !/usr/bin/perl maildisable-v7.pl Mail Enable Professional/Enterprise v2.32-7 win32 by mu-b - Wed Feb 14 2007 - Tested on: Mail Enable Professional v2.37 win32 use Getopt::Std; getopts't:', \%arg; use Socket; use MIME::Base64; my $target;...

BrowseDialog Class (ccrpbds6.dll) Multiple Methods DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================== BrowseDialog Class ccrpbds6.dll Multiple Methods DoS Exploit ==============================================================...

MailEnable Enterprise <= 2.32 - 2.34 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl maildisable-v3.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Thu Nov 23 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32...

maildisable-v3.pl.txt

!/usr/bin/perl maildisable-v3.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Thu Nov 23 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32 what does this remind you off? Note...

MailEnable IMAPD Enterprise 2.32 < 2.34 - Remote Buffer Overflow

!/usr/bin/perl maildisable-v3.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Thu Nov 23 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32 what does this remind you off? Note...

MailEnable IMAPD Professional 2.35 - Remote Buffer Overflow

!/usr/bin/perl maildisable-v6.pl Mail Enable Professional =v2.35 win32 remote exploit by mu-b - Tue Dec 5 2006 - Tested on: Mail Enable Professional v2.35 win32 Note: timing is quite critical with this!!, so change $senddelay if it doesn't work.... use Getopt::Std; getopts't:n:', %arg; use Socket...

MailEnable Professional 2.35 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits =========================================================== MailEnable Professional 2.35 Remote Buffer Overflow Exploit =========================================================== !/usr/bin/perl maildisable-v6.pl Mail Enable Professional...

MailEnable IMAPD Professional 2.35 - Remote Buffer Overflow

MailEnable IMAPD Professional 2.35 - Remote Buffer Overflow !/usr/bin/perl maildisable-v6.pl Mail Enable Professional =v2.35 win32 remote exploit by mu-b - Tue Dec 5 2006 - Tested on: Mail Enable Professional v2.35 win32 Note: timing is quite critical with this!!, so change $senddelay if it doesn...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag...

CVE-2007-0652

Cross-site request forgery CSRF vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via 1 e-mail messages and 2 the ID parameter to a right.asp, b Forms/MAI/list.asp, and c Forms/VCF/list.asp in mewebmail/base/default/lang/EN/...

CVE-2007-0651

Multiple cross-site scripting XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via 1 e-mail messages and 2 the ID parameter to a right.asp, b Forms/MAI/list.asp, and c Forms/VCF/list.asp in mewebmail/base/default/lang/EN/...

CVE-2007-0652

CVE-2007-0652 describes a CSRF vulnerability in MailEnable Professional prior to version 2.37 . An attacker can leverage a crafted link or IMG tag to cause an authenticated user to perform unauthorized actions, effectively allowing the attacker to modify arbitrary configurations and act as arbitr...

CVE-2007-0651

MailEnable Professional (before 2.37) is affected by CVE-2007-0651 with multiple XSS flaws in the Web Mail Client. The vulnerabilities allow remote injection of arbitrary JavaScript by exploiting unsanitized content in email messages and in the ID parameter for mewebmail/base/default/lang/EN/{rig...

Out-of-bounds

The NTLMUnPackType3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service application crash via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port 143/tcp, which results in an out-of-bounds read...

CVE-2007-0955

The NTLMUnPackType3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service application crash via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port 143/tcp, which results in an out-of-bounds read...

CVE-2007-0955

The CVE-2007-0955 entry concerns MailEnable Professional (version 2.35 and earlier) where the NTLM_UnPack_Type3 function in MENTLM.dll is vulnerable. Remote attackers can cause an application crash (DoS) by sending certain base64-encoded data after an AUTHENTICATE NTLM command to the IMAP port (1...