668 matches found
FluxBB 1.5.6 - SQL Injection
FluxBB 1.5.6 - SQL Injection !/usr/bin/env python Friday, November 21, 2014 - secthrowaway safe-mail net FluxBB 80: sys.exit'SQL too long, max 80 chars' print "1st stage: %s %d chars" % sql, lensql r = urlopenRequest'%sprofile.php?action=changeemail&id=%s' % url, uid,...
CVE-2013-6796
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind...
Authentication flaw
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind...
CVE-2013-6796
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind...
CVE-2013-6796
The CVE-2013-6796 entry concerns the SMTP server in DeepOfix 3.3 and earlier, where an empty password allows remote attackers to bypass authentication, triggering an LDAP anonymous bind. The vulnerability is documented across multiple sources (NVD, CVE lists, and OpenVAS) with a consistent descri...
CVE-2013-6796: Undefined Security Weakness
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind...
PT-2014-3203
Name of the Vulnerable Software and Affected Versions DeepOfix versions 3.3 and earlier Description The issue allows remote attackers to bypass authentication on the SMTP server via an empty password, triggering an LDAP anonymous bind. Recommendations For DeepOfix versions 3.3 and earlier, update...
Nevis Systems All-Mail 1.1 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining control of the victim...
Alt-N MDaemon 6.5.1 SMTP Server Multiple Command Remote Overflow
No description provided by source. source: http://www.securityfocus.com/bid/11238/info Alt-N MDaemon is reportedly prone to multiple remote buffer overflow vulnerabilities. The vulnerabilities are likely due to a failure of the application to properly validate buffer sizes when processing command...
Free SMTP Server <= 2.2 Spam Filter Vulnerability
No description provided by source...
MDaemon SMTP Server 5.0.5 Null Password Authentication Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8382/info A vulnerability has been reported to affect the MDaemon SMTP authentication handler. It has been reported that any valid username or account can be used in conjunction with a null password, to access the MDaemon...
QK SMTP Server Malformed Commands Multiple Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these issues to crash the affected application, denying...
eXtremail 1.x/2.1 - Remote Format String Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously constructe...
Nosque Workshop MsgCore 1.9 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/930/info There is a denial of service condition in Nosque Workshop's MsgCore SMTP server. The problem lies in memory used to store server input not being deallocated and eventually exhausted, causing the target NT host to...
BaSoMail 1.24 SMTP Server Command Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7726/info BaSoMail SMTP Server has been reported prone to a buffer overflow vulnerability. The issue is likely due to a lack of sufficient bounds checking performed on arguments passed to SMTP commands. Although unconfirm...
IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability
漏洞起因 栈溢出导致的远程代码执行 影响系统 Lotus Domino Server Versions 8.0 and 8.5 on AIX, AIX 64bit, Linux, Linux iSeries, Linux, zSeries, Solaris, Windows, Windows 64bit, z/OS 危害 远程攻击者可以利用漏洞在服务器上执行任意代码。 攻击所需条件 攻击者构造包含特殊参数的邮件。 漏洞信息 未经身份验证的远程代码执行漏洞是由于代码在识别处理和转换 iCalendar...
Multiple MicroWorld eScan Products Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with...
BusinessMail <= 4.60.00 Remote Buffer Overflow Exploit
No description provided by source. ===== Start BusMailSMTPDOS.pl ===== Usage: BusMailSMTPDOS.pl ip BusMailSMTPDOS.pl 127.0.0.1 BusinessMail email server system 4.60.00 Download: http://www.netcplus.com/ use IO::Socket; use strict; my$socket = ; if $socket = IO::Socket::INET-newPeerAddr = $ARGV0,...
GoodTech SMTP Server <= 5.14 Denial of Service Exploit
No description provided by source. ===== Start GoodTechSMTPServerDOS.pl ===== Usage: GoodTechSMTPServerDOS.pl ip GoodTechSMTPServerDOS.pl 127.0.0.1 GoodTech SMTP Server for Windows NT/2000/XP version 5.14 Download: http://www.goodtechsys.com/ use IO::Socket; use strict; my$socket = ; if $socket =...
DeepOfix SMTP Server 3.3 - Authentication Bypass
No description provided by source. ====================================================================================== Vulnerability: Bypass authentication and gain unauthorized access to SMTP server ====================================================================================== Platfor...