Design/Logic Flaw

QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...

CVE-2007-6573

QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...

CVE-2007-6573

Summary: CVE-2007-6573 affects QK SMTP Server, with a denial-of-service condition triggered by abnormally long commands (HELO, MAIL FROM, RCPT TO) or a long DATA payload. The connected OpenVAS entries describe a stack-based overflow in the RCPT TO handling, implying a potential crash of the SMTP ...

QK SMTP Server畸形命令多个远程拒绝服务漏洞

QK SMTP Server是一款SMTP服务程序。 QK SMTP Server不正确处理多个命令，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 对如下命令参数缺少充分过滤，可导致应用程序崩溃，停止响应： HELO ../A/ 950 AIL FROM: ../A/ 950 RCPT TO: ../A/ 950 data ../A/ 950 QKSoft QK SMTP 3 目前没有解决方案提供： http://www.qksoft.com/...

QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities

QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these...

QK SMTP Server DoS

No description provided...

QK SMTP Server 3 - Denial of service

Apparently this SMTP server crashes when creating a mail poorly trained causing a denial of service. Proof-of-concept HELO ../A/ 950 MAIL FROM: ../A/ 950 RCPT TO: ../A/ 950 data ../A/ 950 . Juan Pablo Lopez Yacubian http://fuzzertina.blogspot.com/...

QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these issues to crash the affected application, denying service to legitimate users. These...

Ipswitch IMail SMTP Server IMail客户端远程缓冲区溢出漏洞

Ipswitch IMail SMTP Server IMail Client是一款提供对IMail服务器进行管理的客户端。 IMail Client客户端处理畸形multipart MIME数据存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理EMAIL中包含multipart MIME数据时，如果"boundary"参数设置超过212字节，可导致触发基于段的缓冲区溢出，精心构建EMAIL数据并诱使用户打开，可导致以应用程序进程权限执行任意指令。 Ipswitch IMail Client 9.22 + Compaq Insight Manager...

CVE-2007-5213

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by 1 an SMTP server change through the confSMTPMailServer1 parameter to ServerManager.srv and 2...

CVE-2007-5094

The CVE pertains to Ipswitch IMail Server (8.01–8.11) where a heap-based buffer overflow in iaspam.dll within the SMTP Server can be triggered by συγκεκριed malformed Content-Type headers (long boundary parameter, a lone “MIME” line, and long Content-Transfer-Encoding lines). This allows remote c...

CVE-2007-5094

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by...

ipswitch80x-heap.txt

/ by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org ÒÔÇ°ÓÐÕâžöÒ»žöimailµÄexp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d options Options: -d: Hostname to attack Required -t: Type Default: 0 -p: Attack port...

IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================= IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit ======================================================= / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List:...

IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit

No description provided by source. / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org 脪脭脟掳脫脨脮芒啪枚脪禄啪枚imail碌脛exp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d host options Options: -d: Hostname to attack Required -...

IPSwitch IMail Server 8.0x - Remote Heap Overflow

IPSwitch IMail Server 8.0x - Remote Heap Overflow / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org ÒÔÇ°ÓÐÕâžöÒ»žöimailµÄexp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d options Options: -d:...

IPSwitch IMail Server 8.0x - Remote Heap Overflow

/ by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org ÒÔÇ°ÓÐÕâžöÒ»žöimailµÄexp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d options Options: -d: Hostname to attack Required -t: Type Default: 0 -p:...

Microworld eScan (Multiple Products) - Local Privilege Escalation

source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP...