562 matches found
Mercury/32 3.32-4.51 - SMTP Pre-Auth EIP Overwrite Exploit
No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP...
TFS Gateway 4.0 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/613/info TFS Gateway 4.0, when configured in a specific non-default manner, is vulnerable to a remotely exploitable denial of service attack. If 'return entire message to sender' is enabled for failed send attempts, and a...
Nosque Workshop MsgCore 1.9 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/930/info There is a denial of service condition in Nosque Workshop's MsgCore SMTP server. The problem lies in memory used to store server input not being deallocated and eventually exhausted, causing the target NT host to...
Nevis Systems All-Mail 1.1 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining control of the victim...
Atrium Software Mercur Mail Server 3.3 EXPN Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2412/info Atrium Software Mercur Mail Server 3.3 contains an unchecked buffer for the EXPN command which may lead to a denial of service attack or execution of arbitrary code depending on the data entered. If a remote...
JavaMail SMTP Header Injection via method setSubject [CSNC-2014-001]
COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: JavaMail Vendor: Oracle CSNC ID: CSNC-2014-001 CVD ID: none Subject: SMTP Header Injection via method setSubject Risk: Medium Effect: Remotely exploitable Author: Alexandre Herzog [email protected] Date:...
SmarterMail Email正文HTML注入漏洞
Bugtraq ID:64970 SmarterMail是一款邮件服务程序。 SmarterMail不正确过滤Email正文数据，允许远程攻击者利用漏洞构建恶意邮件，诱使用户解析，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 SmarterMail 11.x 目前没有详细解决方案提供： http://www.smartertools.com/smartermail/mail-server-software.aspx ?php / Exploit Title: SmarterMail Enterprise and Standard =11.x Stored XSS Google...
DeepOfix 3.3 SMTP Authentication Bypass Vulnerability
DeepOfix versions 3.3 and below suffer from an SMTP server authentication bypass vulnerability due to an LDAP issue. ====================================================================================== Vulnerability: Bypass authentication and gain unauthorized access to SMTP server...
DeepOfix SMTP Server 3.3 - Authentication Bypass
DeepOfix SMTP Server 3.3 - Authentication Bypass ====================================================================================== Vulnerability: Bypass authentication and gain unauthorized access to SMTP server...
email_report
This plugin sends short report only vulnerabilities by email to specified addresses. There are some configurable parameters: smtpServer smtpPort toAddrs fromAddr Plugin type Output Options Name | Type | Default Value | Description | Help ---|---|---|---|--- smtpServer | string | localhost | SMTP...
Nmap NSE 6.01: smtp-commands
Attempts to use EHLO and HELP to gather the Extended commands supported by an SMTP server. SYNTAX: smtp.domain: or smtp-commands.domain Define the domain to be used in the SMTP commands. OpenVAS Vulnerability Test $Id: gbnmap6smtpcommands.nasl 7006 2017-08-25 11:51:20Z teissa $ Autogenerated NSE...
OTRS Open Technology Real Services 3.1.8/3.1.9 - Cross-Site Scripting
!/usr/bin/python ''' Author: Mike Eduard - Znuny - Enterprise Services for OTRS Product: OTRS Open Technology Real Services Version: 3.1.8 and 3.1.9 Vendor Homepage: http://otrs.org CVE: 2012-4600 Timeline: 22 Aug 2012: Vulnerability reported to vendor and CERT 23 Aug 2012: Response received from...
Hupa Webmail 0.0.2 Stored XSS
Exploit for java platform in category web applications !/usr/bin/python ''' Exploit Title: Hupa Webmail Stored XSS Date: 14/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://james.apache.org/hupa/ Software Link:...
Scientific Linux Security Update : fetchmail on SL3.x, SL4.x, SL5.x i386/x86_64
CVE-2007-4565 Fetchmail NULL pointer dereference CVE-2008-2711 fetchmail: Crash in large log messages in verbose mode CVE-2009-2666 fetchmail: SSL null terminator bypass It was discovered that fetchmail is affected by the previously published 'null prefix attack', caused by incorrect handling of...
Fedora Update for nginx FEDORA-2012-6371
Check for the Version of nginx OpenVAS Vulnerability Test Fedora Update for nginx FEDORA-2012-6371 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Service Detection : SMTP Server on a Well-Known Port
This plugin attempts to collect the banner from services listening on well-known SMTP ports. It is not expected to report anything. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57914; scriptversion"$Revision: 2.4 $"; scriptcvsdate"$Date: 2013/02/17 01:24:57 $";...
Backported Security Patch Detection (SMTP)
Security patches may have been 'backported' to the remote SMTP server without changing its version number. Banner-based checks have been disabled to avoid false positives. Note that this test is informational only and does not denote any security problem. C Tenable Network Security, Inc...
FTP Client Initiated from an SMTP Server
Binary data 6246.prm...
[security bulletin] HPSBOV02470 SSRT080123 rev.1 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01915145 Version: 1 HPSBOV02470 SSRT080123 rev.1 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be act...