SLMail 5.5 - Remote Buffer Overflow Exploit

No description provided by source. / SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov ????-????? ???????????????? 31337 Team / include string.h include stdio.h include winsock2.h include windows.h // bind 4444 unsigned char shellcode = \xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x...

SLMail 5.5 - POP3 PASS Remote Buffer Overflow Exploit

No description provided by source. include fcntl.h include stdio.h include stdlib.h include sys/socket.h include sys/types.h include sys/wait.h include errno.h include netinet/in.h include netdb.h include string.h define retadd \x9f\x45\x3a\x77 /win2k server sp4 0x773a459f/ define port 110 /...

SLMail 5.5 - POP3 PASS Buffer Overflow Exploit

No description provided by source. SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts www.offsec.com Plain vanilla stack overflow in the PASS command D:\Projects\BOSLmail-5.5-POP3-PASS.py D:\Projects\BOnc -v 192.168.1.167 4444 localhost.lan 192.168.1.167 4444 ? open Microso...

SLMail Pro 6.3.1.0 - Multiple Remote Denial Of Service and Memory Corruption Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/28505/info SLMail Pro is prone to multiple remote denial-of-service vulnerabilities and memory-corruption vulnerabilities. Attackers can exploit these issues to crash the application, resulting in denial-of-service...

CVE-2008-1691

Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service UDP service outage via a large packet to UDP port 54. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service daemon crash via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party...

CVE-2008-1689

Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service daemon crash via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party...

Information disclosure

Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service UDP service outage via a large packet to UDP port 54. NOTE: some of these details are obtained from third party information...

Memory corruption

WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service memory corruption and daemon crash or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third...

CVE-2008-1691

Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service UDP service outage via a large packet to UDP port 54. NOTE: some of these details are obtained from third party information...

CVE-2008-1690

CVE-2008-1690 affects WebContainer.exe version 1.0.0.336 and earlier bundled with SLMail Pro 6.3.1.0 and earlier. The issue allows remote attackers to trigger a denial of service (memory corruption and daemon crash) and potentially execute arbitrary code by sending a long URI in HTTP requests to ...

CVE-2008-1689

CVE-2008-1689 is a stack consumption vulnerability affecting WebContainer.exe up to version 1.0.0.336 and SLMail Pro up to 6.3.1.0. A remote attacker can cause a denial of service (daemon crash) by sending a long request header in an HTTP request to TCP port 801. The provided documents identify t...

CVE-2008-1690

WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service memory corruption and daemon crash or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third...

CVE-2008-1689

Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service daemon crash via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party...

CVE-2008-1691

CVE-2008-1691 affects SLMail Pro 6.3.1.0 and earlier. A remote attacker can cause a denial of service (UDP service outage) by sending a large UDP packet to port 54. The description notes that some details come from third‑party information. No root-cause, affected version range beyond “6.3.1.0 and...

Seattlelab SLMail Pro multiple security vulnerabilities

Memory corruption and DoS conditions...

SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service Memory Corruption Vulnerabilities

SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service Memory Corruption Vulnerabilities source: https://www.securityfocus.com/bid/28505/info SLMail Pro is prone to multiple remote denial-of-service vulnerabilities and memory-corruption vulnerabilities. Attackers can exploit these issues to crash...

SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service / Memory Corruption Vulnerabilities

source: https://www.securityfocus.com/bid/28505/info SLMail Pro is prone to multiple remote denial-of-service vulnerabilities and memory-corruption vulnerabilities. Attackers can exploit these issues to crash the application, resulting in denial-of-service conditions. Given the nature of some of...

Seattle Lab Mail 5.5 POP3 Buffer Overflow

There exists an unauthenticated buffer overflow vulnerability in the POP3 server of Seattle Lab Mail 5.5 when sending a password with excessive length. Successful exploitation should not crash either the service or the server; however, after initial use the port cannot be reused for successive...

Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (3)

/ SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / include include include include // bind 4444 unsigned char shellcode = "\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x45" "\x3c\x8b\x7c\x05\x78\x01\xef\x8b\x4f\x18\x8b\x5f\x20\x01\xeb\x49"...