BusinessMail Server 4.60.00 - Remote Buffer Overflow

BusinessMail Server 4.60.00 - Remote Buffer Overflow ===== Start BusMailSMTPDOS.pl ===== Usage: BusMailSMTPDOS.pl BusMailSMTPDOS.pl 127.0.0.1 BusinessMail email server system 4.60.00 Download: http://www.netcplus.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...

CVE-2005-2387

Affected product: GoodTech SMTP Server 5.16; vulnerability in RCPT TO command processing causes multiple stack-based buffer overflows, enabling remote arbitrary code execution (often as SYSTEM). Remediation: upgrade to 5.17 or later.

CVE-2005-2387

Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via 1 a RCPT TO command with a long DNS name, or 2 a large number of RCPT TO commands with a long e-mail name arugment in the last command...

CVE-2005-2387

Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via 1 a RCPT TO command with a long DNS name, or 2 a large number of RCPT TO commands with a long e-mail name arugment in the last command...

CVE-2005-2387: Undefined Security Weakness

Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via 1 a RCPT TO command with a long DNS name, or 2 a large number of RCPT TO commands with a long e-mail name arugment in the last command...

[Full-disclosure] ClamAV Multiple Rem0te Buffer Overflows

Date July 25, 2005 Vulnerability ClamAV is the most widely used GPL antivirus library today. It provides file format support for virus analysis. During analysis ClamAV Antivirus Library is vulnerable to buffer overflows allowing attackers complete control of the system. These vulnerabilities can ...

nbsmtp -- format string vulnerability

When nbsmtp is executed in debug mode, server messages will be printed to stdout and logged via syslog. Syslog is used insecurely and user-supplied format characters are directly fed to the syslog function, which results in a format string vulnerability. Under some circumstances, an SMTP server m...

GoodTech SMTP Server for Windows DoS

Incomplete e-mail addres in RCPT TO: command causes server to crash. Oversized RCPT TO: causes buffer overflow...

GoodTech SMTP server 5.16 RCPT TO command remote buffer overflow

Arbitrary code execution in GoodTech's SMTP server discovered by Raphal Rigo Product: SMTP server by GoodTech Systems Affected Version: 5.16 Evaluation verified, = regged and 5.15 probably too Not affected Version: 5.17 OS affected: All WinNT NT/2K/XP/2K3 Risk: Critical Remote Exploit: yes URL:...

GoodTech SMTP Server < 5.17 'RCPT TO' Command Remote Overflow (deprecated)

Binary data 3106.prm...

SquirrelMail Arbitrary Variable Overwriting Vulnerability

GulfTech Security Research July 14th, 2005 Vendor : The SquirrelMail Project Team URL : http://www.squirrelmail.org/ Version : SquirrelMail 1.4.5-RC1 && Earlier Risk : Variable Overwriting Description: SquirrelMail is a standards-based webmail package written in php. It includes built-in pure PHP...

CVE-2002-2080

Floositek FTGate PRO 1.05 is affected by a denial-of-service vulnerability where an attacker can trigger memory and CPU exhaustion by sending a large number of RCPT TO: messages during an SMTP session. The impact is partial availability as per CVSS 2.0 metrics. No remediation details are provided...

CVE-2001-1542

CVE-2001-1542 concerns NAI WebShield SMTP 4.5 (and possibly 4.5 MR1a), where the product does not filter improperly MIME-encoded email attachments. The consequence described across connected records is that this could allow remote attackers to bypass filtering and potentially execute arbitrary co...

CVE-2001-1542

NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments...

CVE-2002-2080

Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service memory and CPU consumption via a large number of RCPT TO: messages during an SMTP session...

CVE-2001-1542: Undefined Security Weakness

NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments...

CVE-2002-2080: Undefined Security Weakness

Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service memory and CPU consumption via a large number of RCPT TO: messages during an SMTP session...

Multiple SoftiaCom wMailServer vulnerabilities

Users passwords are stored in unsafe place. Buffer overflow on oversized SMTP command...

CVE-2005-2223

Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service crash during authentication...

CVE-2005-2223

CVE-2005-2223 affects the MailEnable SMTP service. Public docs indicate an unknown vulnerability in MailEnable Standard before 1.9 and Professional before 1.6 that allows remote attackers to cause a denial of service (crash) during authentication. Red Hat records echo the unknown vulnerability, a...