[SECURITY] Fedora 10 Update: squirrelmail-1.4.19-1.fc10

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

[SECURITY] Fedora 9 Update: squirrelmail-1.4.19-1.fc9

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

Novell GroupWise Internet Agent Remote Buffer Overflow Vulnerabilities

VUPEN Security Research Advisory - VUPEN-SR-2009-01 // VUPEN-SR-2009-02 Advisory URL: http://www.vupen.com/english/advisories/2009/1393 May 22, 2009 I. BACKGROUND ---------------------- Novell GroupWise is a complete collaboration software solution that provides information workers with e-mail,...

Novell GroupWise Internet代理邮件地址处理缓冲区溢出漏洞

BUGTRAQ ID: 35064,35065 CVECAN ID: CVE-2009-1636 Novell GroupWise是一款跨平台协作软件。 Novell GroupWise Internet代理（GWIA）在通过SMTP处理特制邮件或处理特制的SMTP请求时存在多个缓冲区溢出漏洞。如果远程攻击者发送了带有超长地址字段的恶意邮件消息的话，就可以触发这些溢出，导致以SYSTEM权限执行任意指令。 Novell Groupwise 8.0 Novell Groupwise 7.0 厂商补丁： Novell ------...

Novell GroupWise buffer overflow

Novell GroupWise Internet Agent SMTP e-mail address buffer overflow...

SA-CONTRIB-2009-030 - Email Verification - Information disclosure / Cross Site Scripting

The Email Verification module tries to verify user email addresses by talking to the appropriate SMTP host. It also allows the administrator to access a list of not confirmed email addresses. In the Drupal 5 version, this list is only protected by the "access content" permission, hence allowing a...

[SECURITY] Fedora 11 Update: squirrelmail-1.4.18-1.fc11

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

Sendmail / Sendmail Switch / SMI Sendmail / Sendmail UCB SMTP Server Detection (SMTP)

SMTP based detection of Sendmail / Sendmail Switch / SMI Sendmail / Sendmail UCB. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service daemon outage or CPU consumption via multiple long SMTP commands, as demonstrated by HELO commands...

CVE-2009-1602

Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service daemon outage or CPU consumption via multiple long SMTP commands, as demonstrated by HELO commands...

CVE-2009-1602

CVE-2009-1602 affects Quick 'n Easy Mail Server 3.3. It enables a remote denial-of-service through processing of multiple long SMTP commands (demonstrated via HELO). The reported impact is daemon outage or CPU consumption, with CVSS base metrics indicating a Network attack vector, low complexity,...

Quick 'n Easy Mail Server SMTP Request Remote Denial Of Service Vulnerability

Quick 'n Easy Mail Server is prone to a denial-of-service vulnerability because it fails to adequately handle multiple socket requests. Attackers can exploit this issue to cause the affected application to reject SMTP requests, denying service to legitimate users. The demonstration release of Qui...

Quick 'n Easy Mail Server 3.3 SMTP Request Remote DoS Vulnerability

Quick SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100185";...

Quick 'n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)

--------------------------------------------------------------- Quick 'n Easy Mail Server 3.3 Demo Remote Denial of Service http://www.pablosoftwaresolutions.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ When you pass a long string to the server, it checks for...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:242)

Two vulnerabilities were discovered in Wireshark. The first is a vulnerability in the SMTP dissector that could cause it to consume excessive CPU and memory via a long SMTP request CVE-2008-5285. The second is an issue with the WLCCP dissector that could cause it to go into an infinite loop. This...

Mandriva Update for wireshark MDVSA-2008:242 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2008:242 wireshark Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Update for wireshark MDVSA-2008:242 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2008:242 wireshark Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

DNS Tunneling Client Detection (SMTP)

Binary data 4976.prm...

IncrediMail 5.86 Cross Site Scripting

!/usr/bin/perl -w IncrediMail Xe latest version XSS Vulnerability Discovered by : Bui Quang Minh Description : The most of popular Mail Client now exclude Script Code for mail content. It aims to avoid the type of XSS exploitation For e.g: stolen cookie. IncrediMail also remove Script Code when t...

IncrediMail 5.86 - Cross-Site Scripting Script Execution

IncrediMail 5.86 - Cross-Site Scripting Script Execution !/usr/bin/perl -w IncrediMail Xe latest version XSS Vulnerability Discovered by : Bui Quang Minh Description : The most of popular Mail Client now exclude Script Code for mail content. It aims to avoid the type of XSS exploitation For e.g:...