RevilloC MailServer 1.x (RCPT TO) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================== RevilloC MailServer 1.x RCPT TO Remote Denial of Service Exploit ================================================================== /...

QK SMTP远程栈溢出漏洞

QK SMTP Server是一款SMTP（简单邮件传输协议）服务器软件。 QK SMTP Server在处理用户命令参数时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 QK SMTP Server在处理传送给“RCPT TO:”命令的参数时存在栈溢出漏洞，远程攻击者可以通过向服务器发送超长参数导致执行任意指令。 QKSoft QK SMTP 3.1.0 Beta QKSoft QK SMTP 3.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.qksoft.com/ /...

RevilloC MailServer 1.x - 'RCPT TO' Remote Denial of Service

/ ============================================================= 0-day RCPT TO DoS Exploit for RevilloC SMTP version 1.x ============================================================= Sending a large buffer 4080 bytes in conjunction with the "MAIL FOR:" or "RCPT TO:" and other commands can cause a...

QK SMTP 3.01 - 'RCPT TO' Remote Buffer Overflow (1)

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 25\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...

CVE-2006-5478

Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via 1 a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors...

Winmail Mail Server 2.3 Remote Format String Exploit

No description provided by source. / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by ThreaT. This one take advantage of a format bug in the SMTP protocol not pop3 for execute a malicious command on a vulnerable system usage : mwmxploit Target IP command to execute remote...

QK SMTP <= 3.01 (RCPT TO) Remote Denial of Service Exploit

No description provided by source. / ============================================================= 0-day RCPT TO DoS Exploit for QK SMTP version 3.01 and lower. ============================================================= Exploit affects a format string error in the RCPT TO command in which the...

QK SMTP <= 3.01 (RCPT TO) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== QK SMTP GLinares.code at gmail dot com / include include include include pragma commentlib,"wsock32.lib" int mainint argc, char argv...

QK SMTP 3.01 - RCPT TO Remote Denial of Service

QK SMTP 3.01 - RCPT TO Remote Denial of Service / ============================================================= 0-day RCPT TO DoS Exploit for QK SMTP version 3.01 and lower. ============================================================= Exploit affects a format string error in the RCPT TO command ...

QK SMTP 3.01 - 'RCPT TO' Remote Denial of Service

/ ============================================================= 0-day RCPT TO DoS Exploit for QK SMTP version 3.01 and lower. ============================================================= Exploit affects a format string error in the RCPT TO command in which the program attempts to print out the...

Symantec Mail Security for Domino Server Relay

SUMMARY Premium Antispam feature of Symantec Mail Security for Domino is vulnerable to allowing a Domino server to be used as an unintended mail relay. This could be used to relay SPAM mail anonymously. Severity Medium can be used to send SPAM Remote | Yes ---|--- Local | No Authentication Requir...

Ipswitch IMail Server 2006 / 8.x (RCPT) Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================================== Ipswitch IMail Server 2006 / 8.x RCPT Remote Stack Overflow Exploit ===================================================================== // IMail 2006 and 8.x SMTP Stack...

Ipswitch IMail Server 2006 8.x - RCPT Remote Stack Overflow

Ipswitch IMail Server 2006 8.x - RCPT Remote Stack Overflow // IMail 2006 and 8.x SMTP Stack Overflow Exploit // coded by Greg Linares glinares.codeatgmaildotcom // http://www.juniper.net/security/auto/vulnerabilities/vuln3414.html // This works on the following versions: // 2006 IMail prior to...

CVE-2006-5313

Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...

CVE-2006-5313

CVE-2006-5313 affects Hastymail 1.5 and earlier (before 2006-10-08). A remote authenticated user can inject arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter, potentially crossing privilege boundaries depending on SMTP server configuration. This entr...

CVE-2006-5313

Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...

YPOPS 0.6 Buffer Overflow

This module exploits a stack buffer overflow in the YPOPS POP3 service. This is a classic stack buffer overflow for YPOPS version 0.6. Possibly Affected version 0.5, 0.4.5.1, 0.4.5. Eip point to jmp ebx opcode in ws32.dll This module requires Metasploit: https://metasploit.com/download Current...

Hastymail 1.x - IMAP SMTP Command Injection

Hastymail 1.x - IMAP SMTP Command Injection source: https://www.securityfocus.com/bid/20424/info Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An authenticated malicious user could execute arbitrary IMAP / SMTP...

Hastymail 1.x - IMAP SMTP Command Injection

source: https://www.securityfocus.com/bid/20424/info Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An authenticated malicious user could execute arbitrary IMAP / SMTP commands on the affected mail server...

eXtremail 1.x2.1 - Remote Format String (3)

eXtremail 1.x2.1 - Remote Format String 3 source: https://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously...