ClamAV Milter Blackhole-Mode Remote Code Execution

This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...

mailenable-dos.txt

!/usr/bin/python MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS Bug discovered by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Standard Edition all versions Professional Edition all versions Enterprise Edition all versions Tested on...

MailEnable 3.13 SMTP Service - 'VRFY/EXPN' Denial of Service

!/usr/bin/python MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS Bug discovered by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Standard Edition all versions Professional Edition all versions Enterprise Edition all versions Tested on...

MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS

Exploit for unknown platform in category dos / poc ============================================================= MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS ============================================================= !/usr/bin/python MailEnable SMTP Service VRFY/EXPN Command...

MailEnable 3.13 SMTP Service - VRFYEXPN Denial of Service

MailEnable 3.13 SMTP Service - VRFYEXPN Denial of Service !/usr/bin/python MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS Bug discovered by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Standard Edition all versions Professional...

MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS

No description provided by source. !/usr/bin/python MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS Bug discovered by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Standard Edition all versions Professional Edition all versions...

CVE-2008-1275

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service crash via crafted 1 EXPN or 2 VRFY commands...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service crash via crafted 1 EXPN or 2 VRFY commands...

CVE-2008-1275

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service crash via crafted 1 EXPN or 2 VRFY commands...

CVE-2008-1275

Technical details (affected products, exact vulnerability mechanisms, and remediation) are not publicly provided in the supplied documents. Monitor for updates as new information may be released.

CVE-2008-1217

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706...

Code injection

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP...

CVE-2007-6706

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP...

CVE-2007-6706

CVE-2007-6706 affects the IBM Lotus Notes client (nlnotes.dll) with versions 6.5 and 7.0.x up to 7.0.2 CCH or 7.0.3, and possibly 8.0. A crafted text payload in an e-mail message sent over SMTP could allow remote code execution. The connected records corroborate this as an unspecified vulnerabili...

CVE-2008-1217

The provided connected documents describe CVE-2007-6706 and CVE-2008-1217 as related, unspecified vulnerabilities affecting IBM Lotus Notes clients. Affected product: nlnotes.dll in the Lotus Notes client. Versions impacted include Notes 6.5, 7.0.x (before 7.0.2 CCH or 7.0.3), and 8.0.x (before 8...

CVE-2007-6706

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP...

CVE-2008-1217

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706...

Citadel SMTP makeuserkey Function RCPT TO Command Remote Overflow

The remote server is running Citadel, an open source solution for email and collaboration. According to its version, the installation of Citadel on the remote host uses insufficient bounds-checking in its SMTP service during memory-copy operations when processing input to the RCPT TO command. An...

Buffer overflow

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...

CVE-2008-0394

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information...