EUVD-2003-0261

Malware in sbrugna...

EUVD-2003-0262

Malware in sbrugna...

EUVD-2003-0263

Malware in sbrugna...

Multiple SLMail/SLWebMail bugs

Multiple buffer overflows, file access, etc...

CVE-2003-0267

ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file...

CVE-2003-0266

Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a long Language parameter to showlogin.dll, 2 a long CompanyID parameter to recman.dll, 3 a long CompanyID parameter to admin.dll, or 4 a long...

CVE-2003-0268

SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message...

CVE-2003-0266

Multiple buffer overflows in SLWebMail 3 on Windows systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a long Language parameter to showlogin.dll, 2 a long CompanyID parameter to recman.dll, 3 a long CompanyID parameter to admin.dll, or 4 a long...

CVE-2003-0267

CVE-2003-0267 affects SLWebMail 3 on Windows, where ShowGodLog.dll can be invoked directly with a full-path argument, allowing remote attackers to read arbitrary files. The underlying issue is that ShowGodLog.dll accepts an argument that specifies a target file path, enabling file disclosure. The...

CVE-2003-0268

CVE-2003-0268 concerns SLWebMail 3 on Windows. The vulnerability arises when remote attackers cause invalid requests to DLLs (e.g., WebMailReq.dll), causing the server to disclose its full path in an error message. This is an information disclosure vulnerability with potential reconnaissance risk...

CVE-2003-0267

ShowGodLog.dll in SLWebMail 3 on Windows systems allows remote attackers to read arbitrary files by directly calling ShowGodLog.dll with an argument specifying the full path of the target file...

CVE-2003-0266

The CVE-2003-0266 entry concerns SLWebMail 3 on Windows with multiple buffer overflows that can be triggered by long parameters to showlogin.dll, recman.dll, admin.dll, or globallogin.dll. This allows remote attackers to cause denial of service and potentially execute arbitrary code. Affected com...

Multiple Vulnerabilities in SLWebmail

NGSSoftware Insight Security Research Advisory Name: Multiple Vulnerabilities in SLWebMail Systems Affected: SLWebMail 3 on Windows Severity: High Risk Vendor URL: http://www.slmail.com Authors: David Litchfield [email protected] Mark Litchfield [email protected] Date: 7th May 2003 Advisor...