CVE-2023-4593 Path Traversal in BVRP Software SLmail

Path traversal vulnerability whose exploitation could allow an authenticated remote user to bypass SecurityManager's intended restrictions and list a parent directory via any filename, such as a multiple ..%2F value affecting the 'dodoc' parameter in the /MailAdmindll.htm file...

BVRP Software Avanquest Software SLmail Path Traversal Vulnerability

BVRP Software Avanquest Software SLmail BVRP Software SLmail is an email server solution from BVRP Software, France. A path traversal vulnerability exists in BVRP Software Avanquest Software SLmail version 5.5.0.4433. An attacker could use this vulnerability to access files and directories stored...

BVRP Software Avanquest Software SLmail Security Breach

BVRP Software Avanquest Software SLmail BVRP Software SLmail is an e-mail server solution from BVRP Software, France. A security vulnerability exists in BVRP Software Avanquest Software SLmail version 5.5.0.4433, which originates from the ability to retrieve credentials files, configuration files...

Seattle Lab Mail (SLMail) 5.1.0.4420 Remote Code Execution Exploit

-- coding: utf-8 -- import socket from time import sleep from os import system system"clear" print 'Shell-code-foi-informada?\r\n' print '1 sim' print '2 nao\n' quest = intinput' ' def main: system"clear" ============================ --ensira-sua-shell-code-aqui buf = "" buf +=...

SLMail 5.1.0.4420 Remote Code Execution

-- coding: utf-8 -- import socket from time import sleep from os import system system"clear" print 'Shell-code-foi-informada?\r\n' print '1 sim' print '2 nao\n' quest = intinput' ' def main: system"clear" ============================ --ensira-sua-shell-code-aqui buf = "" buf +=...

SLMail 5.5 - Remote Buffer Overflow Exploit

No description provided by source. / SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov ????-????? ???????????????? 31337 Team / include string.h include stdio.h include winsock2.h include windows.h // bind 4444 unsigned char shellcode = \xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x...

SLMail 5.5 - POP3 PASS Remote Buffer Overflow Exploit

No description provided by source. include fcntl.h include stdio.h include stdlib.h include sys/socket.h include sys/types.h include sys/wait.h include errno.h include netinet/in.h include netdb.h include string.h define retadd \x9f\x45\x3a\x77 /win2k server sp4 0x773a459f/ define port 110 /...

SLMail Pro 6.3.1.0 - Multiple Remote Denial Of Service and Memory Corruption Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/28505/info SLMail Pro is prone to multiple remote denial-of-service vulnerabilities and memory-corruption vulnerabilities. Attackers can exploit these issues to crash the application, resulting in denial-of-service...

SLMail 5.5 - POP3 PASS Buffer Overflow Exploit

No description provided by source. SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts www.offsec.com Plain vanilla stack overflow in the PASS command D:\Projects\BOSLmail-5.5-POP3-PASS.py D:\Projects\BOnc -v 192.168.1.167 4444 localhost.lan 192.168.1.167 4444 ? open Microso...

Design/Logic Flaw

Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service daemon crash via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party...

CVE-2008-1691

Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service UDP service outage via a large packet to UDP port 54. NOTE: some of these details are obtained from third party information...

CVE-2008-1689

Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service daemon crash via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party...

Memory corruption

WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service memory corruption and daemon crash or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third...

Information disclosure

Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service UDP service outage via a large packet to UDP port 54. NOTE: some of these details are obtained from third party information...

CVE-2008-1691

Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service UDP service outage via a large packet to UDP port 54. NOTE: some of these details are obtained from third party information...

CVE-2008-1690

CVE-2008-1690 affects WebContainer.exe version 1.0.0.336 and earlier bundled with SLMail Pro 6.3.1.0 and earlier. The issue allows remote attackers to trigger a denial of service (memory corruption and daemon crash) and potentially execute arbitrary code by sending a long URI in HTTP requests to ...

CVE-2008-1689

CVE-2008-1689 is a stack consumption vulnerability affecting WebContainer.exe up to version 1.0.0.336 and SLMail Pro up to 6.3.1.0. A remote attacker can cause a denial of service (daemon crash) by sending a long request header in an HTTP request to TCP port 801. The provided documents identify t...

CVE-2008-1689

Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service daemon crash via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party...

CVE-2008-1691

CVE-2008-1691 affects SLMail Pro 6.3.1.0 and earlier. A remote attacker can cause a denial of service (UDP service outage) by sending a large UDP packet to port 54. The description notes that some details come from third‑party information. No root-cause, affected version range beyond “6.3.1.0 and...

CVE-2008-1690

WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service memory corruption and daemon crash or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third...