5914 matches found
Mercury/32 / Mercury/NLM SMTP server buffer overflow
Buffer overflow on oversized CRAM-MD5 authentication string...
CVE-2007-4440
CVE-2007-4440 describes a stack-based buffer overflow in the MercuryS SMTP server of the Mercury Mail Transport System (likely version ≤ 4.51). The vulnerability occurs when processing an SMTP AUTH CRAM-MD5 string, enabling a remote attacker to potentially execute arbitrary code with the privileg...
[Full-disclosure] Mercury SMTPD Remote Preauth Stack Based Overrun
Mercury Mail Transport System Remote Stack Based Overflow Overview Mercury Mail Transport System: Mercury is a free, standards-based mail server solution, providing comprehensive, fast server support for all major Internet e- mail protocols. It is supplied in two versions, one hosted on Windows...
Mercury Mail Transport System AUTH CRAM-MD5远程栈溢出漏洞
BUGTRAQ ID: 25357 Mercury Mail Transport System是一款综合的Internet邮件服务器系统。 Mercury Mail Transport System的SMTP服务器没有正确地处理超长的AUTH CRAM-MD5字符串，远程攻击者可能利用此漏洞控制服务器。 如果用户向服务器提交了恶意的认证请求的话，就可能触发栈溢出，导致完全入侵服务器系统。 Pegasus Mail Mercury Mail Transport System 4.51 Pegasus Mail Mercury Mail Transport System 4.01b...
mercury-poc.txt
If there are images in this attachment, they will not be displayed. Download the original attachment Mercury Mail Transport System Remote Stack Based Overflow Overview Mercury Mail Transport System: Mercury is a free, standards-based mail server solution, providing comprehensive, fast server...
Mercury SMTPD Remote Preauth Stack Based Overrun PoC
No description provided by source. If there are images in this attachment, they will not be displayed. Download the original attachment Mercury Mail Transport System Remote Stack Based Overflow Overview Mercury Mail Transport System: Mercury is a free, standards-based mail server solution,...
Mercury SMTPD Remote Preauth Stack Based Overrun PoC
Exploit for unknown platform in category dos / poc ==================================================== Mercury SMTPD Remote Preauth Stack Based Overrun PoC ==================================================== If there are images in this attachment, they will not be displayed. Download the origin...
Mercury/32 Mail SMTPD - Remote Stack Overrun (PoC)
If there are images in this attachment, they will not be displayed. Download the original attachment Mercury Mail Transport System Remote Stack Based Overflow Overview Mercury Mail Transport System: Mercury is a free, standards-based mail server solution, providing comprehensive, fast server...
Mercury32 Mail SMTPD - Remote Stack Overrun (PoC)
Mercury32 Mail SMTPD - Remote Stack Overrun PoC If there are images in this attachment, they will not be displayed. Download the original attachment Mercury Mail Transport System Remote Stack Based Overflow Overview Mercury Mail Transport System: Mercury is a free, standards-based mail server...
CVE-2007-4335
Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial of service service crash via format string specifiers in certain unexpected commands, which trigger a crash during error logging...
Format string
Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial of service service crash via format string specifiers in certain unexpected commands, which trigger a crash during error logging...
CVE-2007-4335
Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial of service service crash via format string specifiers in certain unexpected commands, which trigger a crash during error logging...
WinGate SMTP会话无效状态远程拒绝服务漏洞
BUGTRAQ ID: 25272 Qbik WinGate是一款Internet网关和通讯服务器。 WinGate在处理畸形请求时存在格式串处理漏洞，远程攻击者可能利用此漏洞导致服务不可用。 WinGate的SMTP服务器组件没有正确地处理与客户端创建的SMTP会话。如果恶意的客户端初始化了到SMTP服务器的连接，就可能通过向服务器发布非预期的命令强制会话成为无效状态。如果出现了这种情况，就会生成错误消息记录问题，而攻击者可以在这个格式化的错误消息中将所提供的数据传输给对vsprintf的不安全调用。这种格式串攻击会导致进程崩溃。 Qbik WinGate 6.x Qbik WinGa...
Qbik WinGate format string vulnerability
Unsafe vsprintf call on invalid SMTP command...
WinGate < 6.2.2 Invalid SMTP State Remote DoS
Binary data 4166.prm...
[HS-A007] Qbik WinGate Remote Denial of Service
Title ===== HS-A007 Qbik WinGate Remote Denial of Service Date ==== 10 August 2007 Affected Software ================= WinGate versions 5.x and 6.x prior to 6.2.2. Overview ======== WinGate by Qbik IP Management Limited is a sophisticated gateway and server product used in over 600,000 networks...
WinGate Invalid SMTP State Format String DoS
The remote host appears to be running WinGate, a Windows application for managing and securing Internet access. The version of WinGate installed on the remote host fails to sanitize user-supplied input to its SMTP server component of format strings before using it to log a problem. By connecting ...
SquirrelMail G/PGP plugin: Arbitrary code execution
Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP protocols. Description The functions deletekey, gpgchecksignpgpmime and gpgrecvkey used in the SquirrelMail G/PGP encryption plugin do not properly escape user-supplied data. Impact An authenticated user could...