Lucene search
+L

127 matches found

NVD
NVD
added 2010/03/27 7:07 p.m.11 views

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

9.3CVSS7.4AI score0.08578EPSS
SaveExploits2References19
UbuntuCve
UbuntuCve
added 2010/03/27 7:07 p.m.17 views

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

9.3CVSS6AI score0.08578EPSS
SaveExploits2References2
securityvulns
securityvulns
added 2010/03/11 12:00 a.m.41 views

Spamassasin milter plugin shell characters vulnerability

Shell characters vulnerability via RCPT TO: command...

4.2AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2009/02/05 12:00 a.m.64 views

ZDI-09-010: Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability

ZDI-09-010: Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-010 February 2, 2009 -- Affected Vendors: Novell -- Affected Products: Novell Netware -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have...

1.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/02/04 12:00 a.m.59 views

Novell Groupwise 8.0 - RCPT Off-by-One

Novell Groupwise 8.0 - RCPT Off-by-One !usr/bin/perl -w QUICK AND DIRTY EXPLOIT Off-by-one error in the SMTP daemon in GroupWise Internet Agent GWIA in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a...

10CVSS6.5AI score0.09655EPSS
SaveExploits6
Packet Storm
Packet Storm
added 2009/02/04 12:00 a.m.46 views

Novell GroupWise 8.0 RCPT Off-By-One Exploit

!usr/bin/perl -w QUICK AND DIRTY EXPLOIT Off-by-one error in the SMTP daemon in GroupWise Internet Agent GWIA in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a...

10CVSS0.09655EPSS
SaveExploits6
zdt
zdt
added 2009/02/04 12:00 a.m.28 views

Novell GroupWise <= 8.0 Malformed RCPT command Off-by-one Exploit

Exploit for unknown platform in category dos / poc ================================================================= Novell GroupWise = 8.0 Malformed RCPT command Off-by-one Exploit ================================================================= !usr/bin/perl -w QUICK AND DIRTY EXPLOIT Off-by-o...

7AI score0.09655EPSS
SaveExploits6
Exploit DB
Exploit DB
added 2009/02/04 12:00 a.m.49 views

Novell Groupwise 8.0 - 'RCPT' Off-by-One

!usr/bin/perl -w QUICK AND DIRTY EXPLOIT Off-by-one error in the SMTP daemon in GroupWise Internet Agent GWIA in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a...

10CVSS5.8AI score0.09655EPSS
SaveExploits6
Zero Day Initiative
Zero Day Initiative
added 2009/02/02 12:00 a.m.32 views

Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware Groupwise SMTP daemon. Authentication is not required to exploit this vulnerability. The specific flaw exists during the parsing of malformed RCPT verb arguments to the SMTP daemon...

10CVSS6.1AI score0.09655EPSS
SaveExploits6References1
NVD
NVD
added 2008/06/19 8:41 p.m.22 views

CVE-2008-2784

The smtpfilter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT...

6.4CVSS6.9AI score0.01359EPSS
SaveExploits0References4
Prion
Prion
added 2008/06/19 8:41 p.m.20 views

Command injection

The smtpfilter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sending RCPT commands with invalid recipients, followed by a DATA command, followed by arbitrary RCPT...

6.4CVSS7.2AI score0.01359EPSS
SaveExploits0References4Affected Software1
Saint
Saint
added 2008/05/12 12:00 a.m.34 views

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

7.5CVSS7.9AI score0.11948EPSS
SaveExploits5
Saint
Saint
added 2008/05/12 12:00 a.m.42 views

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

7.5CVSS7.9AI score0.11948EPSS
SaveExploits5
Prion
Prion
added 2008/01/23 12:00 p.m.19 views

Buffer overflow

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

7.5CVSS8.4AI score0.11948EPSS
SaveExploits5References7Affected Software1
NVD
NVD
added 2008/01/23 12:00 p.m.20 views

CVE-2008-0394

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

7.5CVSS7.8AI score0.11948EPSS
SaveExploits5References7
Cvelist
Cvelist
added 2008/01/23 11:00 a.m.36 views

CVE-2008-0394

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

7.8AI score0.11948EPSS
SaveExploits5References7
Tenable Nessus
Tenable Nessus
added 2008/01/22 12:00 a.m.18 views

Citadel < 7.11 makeuserkey Function RCPT TO Command Remote Overflow

Binary data 4352.prm...

7.5CVSS7.3AI score0.11948EPSS
SaveExploits5References2
seebug.org
seebug.org
added 2007/02/05 12:00 a.m.16 views

Imail 8.10-8.12 (RCPT TO) Remote Buffer Overflow Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

7.1AI score
SaveExploits0
zdt
zdt
added 2007/02/04 12:00 a.m.24 views

Imail 8.10-8.12 (RCPT TO) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== Imail 8.10-8.12 RCPT TO Remote Buffer Overflow Exploit ======================================================== !/usr/bin/perl...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/02/04 12:00 a.m.36 views

Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow

!/usr/bin/perl http://www.zerodayinitiative.com/advisories/ZDI-06-028.html https://www.securityfocus.com/bid/19885 acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 3 print "--------------------------------------------------------------------\n"; print "Usage : Imail-rcpt-overflow.pl...

7.5CVSS5.8AI score0.61127EPSS
SaveExploits10
Rows per page
Query Builder