Novell GroupWise <= 8.0 Malformed RCPT command Off-by-one Exploit

Exploit for unknown platform in category dos / poc ================================================================= Novell GroupWise = 8.0 Malformed RCPT command Off-by-one Exploit ================================================================= !usr/bin/perl -w QUICK AND DIRTY EXPLOIT Off-by-o...

Novell Groupwise 8.0 - 'RCPT' Off-by-One

!usr/bin/perl -w QUICK AND DIRTY EXPLOIT Off-by-one error in the SMTP daemon in GroupWise Internet Agent GWIA in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a...

Novell GroupWise 8.0 RCPT Off-By-One Exploit

!usr/bin/perl -w QUICK AND DIRTY EXPLOIT Off-by-one error in the SMTP daemon in GroupWise Internet Agent GWIA in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a...

Buffer overflow

Off-by-one error in the SMTP daemon in GroupWise Internet Agent GWIA in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow...

CVE-2009-0410

Off-by-one error in the SMTP daemon in GroupWise Internet Agent GWIA in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow...

CVE-2009-0410

CVE-2009-0410 is an off-by-one buffer overflow in the GroupWise Internet Agent (GWIA) SMTP daemon. A long RCPT command email address can trigger a buffer overflow, enabling remote attackers to execute arbitrary code on Novell GroupWise servers. Affected versions span GroupWise 6.5x, 7.0/7.01/7.02...

CVE-2009-0410

Off-by-one error in the SMTP daemon in GroupWise Internet Agent GWIA in Novell GroupWise 6.5x, 7.0, 7.01, 7.02, 7.03, 7.03HP1a, and 8.0 allows remote attackers to execute arbitrary code via a long e-mail address in a malformed RCPT command, leading to a buffer overflow...

Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware Groupwise SMTP daemon. Authentication is not required to exploit this vulnerability. The specific flaw exists during the parsing of malformed RCPT verb arguments to the SMTP daemon...

Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP Top Ten vulnerabilities" Too bad it doesn't defend its...

Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery Cross-Site Scripting

Profense Web Application Firewall 2.6.2 - Cross-Site Request Forgery Cross-Site Scripting Written By Michael Brooks Special thanks to str0ke! Affects: Profense Web Application Firewall XSRF and XSS Version: 2.6.2 download http://www.armorlogic.com/downloadsoftware.html "Defenses against all OWASP...

Preemptive Protection against Novell Groupwise Internet Agent RCPT Command Buffer Overflow

A buffer overflow vulnerability was reported in Novell GroupWise, a client-server collaborative software and email system provided by Novell. The vulnerability is due to a boundary error while processing specially crafted SMTP requests. Remote attackers can exploit this vulnerability to execute...

[Backports-security-announce] Security Update for uw-imap

Magnus Holmgren uploaded new packages for uw-imap which fixed the following security problems: CVE-2008-5005 Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local user...

Moderate: Red Hat Security Advisory: squirrelmail security update

An updated squirrelmail package that resolves various security issues is now available for Red Hat Enterprise Linux 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is an easy-to-configure, standards-based, webmail packa...

Symantec Mail Security for SMTP < 5.0.1 Patch 200 Unspecified DoS

Symantec Mail Security for SMTP, which provides anti-spam and anti- virus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host is affected by an unspecified denial of service vulnerability. C...

Kerio MailServer/Connect Detection (HTTP, SMTP, POP3, IMAP, NNTP)

This script will detect the version of Kerio MailServer or Connect on the remote host. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 9 : git-1.5.6.6-1.fc9 (2008-11650)

This update fixes a local privilege escalation bug in gitweb. For details: http://article.gmane.org/gmane.comp.version-control.git/103624 Additionally, gitk has been added as a requirement of git-gui bug 476308 and perlNet::SMTP::SSL has been added as a requirement of git-send-email bug 443615...

[ MDVSA-2008:242 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:242 http://www.mandriva.com/security/ Package : wireshark Date : December 15, 2008 Affected: 2008.1, 2009.0, Corporate 4.0 Problem Description: Two vulnerabilities were discovered in Wireshark. The first is ...

Эксплоит для эксплуатации уязвимости EZSA-2008-003 с активацией учетной записи

Эксплоит для эксплуатации уязвимости EZSA-2008-003 с активацией учетной записи Описание: Уязвимость связана с недостаточной проверкой при регистрации нового пользователя /user/register. Успешная эксплуатация уязвимости позволяет получить привилегии администратора CMS. Уязвимости подвержены...

MSN cross-site vulnerability analysis-vulnerability warning-the black bar safety net

As early as a few days ago, heard colleagues say,“friends msn send to a web page, enter the password, the results a few days later, the MSN password is wrong, could be stolen.” At that time also asked colleagues want the address, but he said address not found. A few days later a friend said to se...

wireshark -- SMTP Processing Denial of Service Vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...