Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow (Metasploit)

Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as...

Imail 8.10-8.12 (RCPT TO) Remote Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits =============================================================== Imail 8.10-8.12 RCPT TO Remote Buffer Overflow Exploit meta =============================================================== This file is part of the Metasploit Framework and ma...

Fetchmail: Denial of Service and password disclosure

Background Fetchmail is a remote mail retrieval and forwarding utility. Description Neil Hoggarth has discovered that when delivering messages to a message delivery agent by means of the "mda" option, Fetchmail passes a NULL pointer to the ferror and fflush functions when refusing a message. Isaa...

[SECURITY] Fedora Core 5 Update: squirrelmail-1.4.8-3.fc5

SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure...

CVE-2006-6940

CVE-2006-6940 describes a buffer overflow in the ParseHeader function of clsOWA.cls within POP3/SMTP to OWA (pop2owa) 1.1.3. A long header in an e‑mail message can allow a remote attacker to execute arbitrary code. The vulnerability affects pop2owa 1.1.3 and is evidenced by the NVD entry with a b...

[SECURITY] Fedora Core 6 Update: fetchmail-6.3.6-1.fc6

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

Symantec Mail Security for Domino Arbitrary Mail Relay

Symantec Mail Security for Domino, which provides antispam and anti- virus protection for Lotus Domino, is installed on the remote Windows host. The Premium Antispam feature included with the version of Symantec Mail Security for Domino on the remote host reportedly fails to recognize and reject ...

QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)

No description provided by source. !/bin/perl http://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg...

QK SMTP server buffer overflow

Buffer overflow on oversized RCPT TO: SMTP command argument...

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow (2)

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow 2 !/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit...

QK SMTP 3.01 - 'RCPT TO' Remote Buffer Overflow (2)

!/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg Linares for discovered the...

QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)

Exploit for unknown platform in category remote exploits ============================================================= QK SMTP = 3.01 RCPT TO Remote Buffer Overflow Exploit pl ============================================================= !/bin/perl http://www.securityfocus.com/bid/20681 tested on...

Information leak from client application with technical information

Data leakage through service information and network protocol in the client application. When exchanging information, you are always transmitting data. However, at different levels everyone remembers ISO/OSI?, service information is added to your data. What is this information, what can it say...

Enemies of Carlotta Shell参数命令执行漏洞

Enemies of Carlotta是一款简单的邮件列表管理器。 Enemies of Carlotta在处理用户参数时存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意命令。 在被用作其他应用程序的shell参数之前，Enemies of Carlotta没有正确地过滤SMTP级的邮件地址，允许远程攻击者在邮件地址中嵌入shell元字符导致执行任意命令。 Lars Wirzenius Enemies of Carlotta 1.2.3 Debian已经为此发布了一个安全公告（DSA-1236-1）以及相应补丁: DSA-1236-1：New enemies-of-carlotta...

CVE-2006-5875

eoc.py in Enemies of Carlotta EoC before 1.2.4 allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address"...

CVE-2006-5875

eoc.py in Enemies of Carlotta EoC before 1.2.4 allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address"...

Know thyself commonly used to hack Email accounts of three methods-vulnerability warning-the black bar safety net

E-mail is not secure, in the mail sending, transmitting and receiving the whole process of each link is there may be a weak link, a malicious user if the use of their vulnerability, it is possible to easily hack the account to get mail content. One, the use of the mail serveroperating...

Your port feel free to open, even on the go sharing your data-vulnerability warning-the black bar safety net

TCP port:the role,vulnerability,and operation in detail analysis In the Internet, we often see the“port”of the word, also frequently used port numbers, such as in the FTP address behind the increase of“21”, and 21 indicates the port number. Then port what does that mean? How do I check port...

Anti-Spam SMTP Proxy Server未授权文件访问漏洞

Anti-Spam SMTP Proxy Server是一款反垃圾邮件SMTP代理服务器。 Anti-Spam SMTP Proxy Server不正确限制用户的访问，远程攻击者可以利用漏洞访问系统上文件获得敏感信息。 John Hanna Anti-Spam SMTP Proxy ASSP Server 1.2.3 http://assp.sourceforge.net/...

Hastymail IMAP SMTP命令注入漏洞

Hastymail IMAP是一款由PHP编写的IMAP协议实现客户端。 Hastymail IMAP不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞执行其他SMTP命令。 由于对命令和信息缺少验证，可导致恶意用户注入任意IMAP/SMTP命令到邮件服务器，可导致绕过限制进行访问。 Hastymail Hastymail 1.5 Hastymail Hastymail 1.2 Hastymail Hastymail 1.1 Hastymail Hastymail 1.0.2 Hastymail Hastymail 1.0.1 升级程序： Hastymail Hastymail...