SMTP User Enumeration Utility

The SMTP service has two internal commands that allow the enumeration of users: VRFY confirming the names of valid users and EXPN which reveals the actual address of users aliases and lists of e-mail mailing lists. Through the implementation of these SMTP commands can reveal a list of valid users...

ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability

ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-128 July 15, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Ipswitch -- Affected Products: Ipswitch IMail -- TippingPointTM IPS Custom...

Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IPSwitch IMail. Authentication is not required to exploit this vulnerability. The specific flaw exists within SMTPDLL.dll called by queuemgr.exe. When handling a message queued for remote delivery...

MS10-024: Description of the security update for Windows SMTP Service: April 13, 2010 and July 13, 2010

None None...

Alt-N MDaemon 6.8.5 - WorldClient 'form2raw.cgi' Remote Stack Buffer Overflow (Metasploit)

$Id: mdaemonworldclientform2raw.rb 9653 2010-07-01 23:33:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora 11 : spamass-milter-0.3.1-18.fc11 (2010-5176)

This update includes a fix for a problem where if the milter is running using the '-x' option to expand aliases before passing inbound mail through SpamAssassin, a malicious client using a carefully-crafted SMTP session could execute arbitrary code on the mail server. The fix avoids the use of a...

Fedora 12 : spamass-milter-0.3.1-18.fc12 (2010-5096)

This update includes a fix for a problem where if the milter is running using the '-x' option to expand aliases before passing inbound mail through SpamAssassin, a malicious client using a carefully-crafted SMTP session could execute arbitrary code on the mail server. The fix avoids the use of a...

I-net Multi User Email Script SQLi Vulnerability

I-net Multi User Email Script SQLi Vulnerability. Webapps exploit for linux platform Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi...

I-net Multi User Email Script SQLi Vulnerability

I-net Multi User Email Script SQLi Vulnerability. Webapps exploit for linux platform 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critica...

I-Net Multi User Email Script SQL Injection

================================================== I-net Multi User Email Script SQLi Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

I-net Multi User Email Script - SQL Injection

Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunsling...

I-net Multi User Email Script - SQL Injection

I-net Multi User Email Script - SQL Injection Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi special thanks to : r0073r...

i-net Multi User Email Script SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= i-net Multi User Email Script SQL Injection Vulnerability =========================================================...

Fedora Update for squirrelmail FEDORA-2010-10264

Check for the Version of squirrelmail OpenVAS Vulnerability Test Fedora Update for squirrelmail FEDORA-2010-10264 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 13 Update: squirrelmail-1.4.20-3.fc13

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no JavaScript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

[SECURITY] Fedora 12 Update: squirrelmail-1.4.20-3.fc12

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no JavaScript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

Mercury/32 Mail SMTPD - AUTH CRAM-MD5 Buffer Overflow (Metasploit)

$Id: mercurycrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Check Sendmail Configuration

Checks the Sendmail Configuration. The Script test the SMTP Sendmail Server if the commands DEBUG, VRFY and EXPN are available. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows SMTP Service DNS Response Spoofing (MS10-024; CVE-2010-1690)

Microsoft Windows Simple Mail Transfer Protocol SMTP service is installed as part of Internet Information Services IIS to transfer email messages. SMTP handles how a given e-mail is transported and delivered across the Internet to the destination server. A spoofing vulnerability has been reported...

SMTP Simple Fuzzer

SMTP Simple Fuzzer This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework A Very simple Module to fuzzer some SMTP commands. It allows to respect the order or just throw everything at it.... class MetasploitModule 'SMTP Simp...