Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

Buffer overflow

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

CVE-2008-0394

CVE-2008-0394 : A buffer overflow in Citadel SMTP Server (versions 7.10 and earlier) is triggered by a long RCPT TO command due to insufficient bounds checking in the makeuserkey function. Remote attackers could potentially execute arbitrary code. Multiple advisories confirm the vulnerability and...

CVE-2008-0394

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

CVE-2008-0394: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

Design/Logic Flaw

QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...

CVE-2007-6573

QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...

CVE-2007-6573

Summary: CVE-2007-6573 affects QK SMTP Server, with a denial-of-service condition triggered by abnormally long commands (HELO, MAIL FROM, RCPT TO) or a long DATA payload. The connected OpenVAS entries describe a stack-based overflow in the RCPT TO handling, implying a potential crash of the SMTP ...

CVE-2007-6573

QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...

CVE-2007-6573: Improper Input Validation

QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...

QK SMTP Server畸形命令多个远程拒绝服务漏洞

QK SMTP Server是一款SMTP服务程序。 QK SMTP Server不正确处理多个命令，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 对如下命令参数缺少充分过滤，可导致应用程序崩溃，停止响应： HELO ../A/ 950 AIL FROM: ../A/ 950 RCPT TO: ../A/ 950 data ../A/ 950 QKSoft QK SMTP 3 目前没有解决方案提供： http://www.qksoft.com/...

QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities

QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these...

QK SMTP Server 3 - Denial of service

Apparently this SMTP server crashes when creating a mail poorly trained causing a denial of service. Proof-of-concept HELO ../A/ 950 MAIL FROM: ../A/ 950 RCPT TO: ../A/ 950 data ../A/ 950 . Juan Pablo Lopez Yacubian http://fuzzertina.blogspot.com/...

QK SMTP Server DoS

No description provided...

QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these issues to crash the affected application, denying service to legitimate users. These...

Ipswitch IMail SMTP Server IMail客户端远程缓冲区溢出漏洞

Ipswitch IMail SMTP Server IMail Client是一款提供对IMail服务器进行管理的客户端。 IMail Client客户端处理畸形multipart MIME数据存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理EMAIL中包含multipart MIME数据时，如果"boundary"参数设置超过212字节，可导致触发基于段的缓冲区溢出，精心构建EMAIL数据并诱使用户打开，可导致以应用程序进程权限执行任意指令。 Ipswitch IMail Client 9.22 + Compaq Insight Manager...

CVE-2007-5213

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

CVE-2007-5094

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by...