MailEnable SMTP NTLM Authentication Buffer Overflow

A buffer overflow vulnerability exists in MailEnable server products. The flaw is caused by insufficient validation checks when processing the signature field of NTLM Type1 messages within the SMTP service. A remote unauthenticated attacker may successfully exploit this vulnerability to execute...

Ipswitch Imail Server List Mailer Reply-To Address Memory Corruption

Exploit for windows platform in category dos / poc ==================================================================== Ipswitch Imail Server List Mailer Reply-To Address Memory Corruption ==================================================================== Title : Ipswitch Imail Server List Mail...

CVE-2010-2580

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

Command injection

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

CVE-2010-2580

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

CVE-2010-2580

MailEnable’s SMTP service MESMTPC.exe (MailEnable 3.x and 4.25) fails length checks for MAIL FROM and RCPT TO, permitting remote attackers to crash the service via overly long addresses/names, triggering an unhandled invalid parameter error. Root cause: insufficient length checks in logging/buffe...

MailEnable 'MESMTRPC.exe' SMTP Service Multiple Remote Denial of Service Vulnerabilities

According to its banner, the remote MailEnable is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issue to crash the affected application, denying service to legitimate users. MailEnable 4.25 Standard Edition, Professional Edition, and Enterprise Edition...

AA SMTP Server 1.1 Denial Of Service

========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 Special thanks to : Ashwin Vamshi,Sid3^effects,r0073r...

IBM Lotus Domino iCalendar - Email Address Stack Buffer Overflow

source: http://labs.mwrinfosecurity.com/advisories/lotusdominoicalstackbufferoverflow/ IBM Lotus Domino iCalendar Email Address Stack Buffer Overflow Vulnerability Package Name: Lotus Domino Server Date Reported: 2010-01-09 Affected Versions: Versions 8.0 and 8.5 on AIX, AIX 64bit, Linux, Linux...

MailEnable SMTP server DoS conditions

Uninitialized memory reference during logging on MAIL FROM / RCPT TO commands...

AA SMTP Server 1.1 - Crash (PoC)

AA SMTP Server 1.1 - Crash PoC ========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 Special thanks to : Ashwin...

AA SMTP SERVER v.1.1 - Crash POC

Exploit for windows platform in category dos / poc ================================ AA SMTP SERVER v.1.1 - Crash POC ================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

AA SMTP Server 1.1 - Crash (PoC)

========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 Special thanks to : Ashwin Vamshi,Sid3^effects,r0073r...

QK SMTP Server 3 RCPT TO: Command DoS

Exploit for windows platform in category dos / poc ===================================== QK SMTP Server 3 RCPT TO: Command DoS ===================================== Author: antrhacks Software Link: http://www.qksoft.com/qk-smtp-server/download.php Version: 3.01 Platform: Windows XP SP3 Home editi...

SquirrelMail PGP Plugin - Command Execution (SMTP) (Metasploit)

$Id: squirrelmailpgpplugin.rb 10148 2010-08-25 20:31:46Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Authentication Capture: SMTP

This module provides a fake SMTP service that is designed to capture authentication credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Authentication Capture: SMTP', 'Description' = %...

Fedora Update for squirrelmail FEDORA-2010-11410

Check for the Version of squirrelmail OpenVAS Vulnerability Test Fedora Update for squirrelmail FEDORA-2010-11410 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for squirrelmail FEDORA-2010-11422

Check for the Version of squirrelmail OpenVAS Vulnerability Test Fedora Update for squirrelmail FEDORA-2010-11422 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 12 Update: squirrelmail-1.4.21-1.fc12

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no JavaScript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

Baby POP Server 1.04 Denial Of Service

DCA-0005 Software - Baby POP Server Vendor Product Description - In the past I have done several projects related to e-mail POP3/SMTP/IMAP4. One of the problems at least in my company is that there are never good test servers available. So that's why I decided to create this simple POP3 server,...