CVE-2008-5006

smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service NULL pointer dereference and application crash by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code...

sslv2 NSE Script

Determines whether the server supports obsolete and less secure SSLv2, and discovers which ciphers it supports. Script Arguments mssql.domain, mssql.instance-all, mssql.instance-name, mssql.instance-port, mssql.password, mssql.protocol, mssql.scanned-ports-only, mssql.timeout, mssql.username See...

smtp-commands NSE Script

Attempts to use EHLO and HELP to gather the Extended commands supported by an SMTP server. Script Arguments smtp.domain or smtp-commands.domain Define the domain to be used in the SMTP commands. smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername See the documentation for the smbaut...

smtp-open-relay NSE Script

Attempts to relay mail by issuing a predefined combination of SMTP commands. The goal of this script is to tell if a SMTP server is vulnerable to mail relaying. An SMTP server that works as an open relay, is a email server that does not verify if the user is authorised to send email from the...

smtp-strangeport NSE Script

Checks if SMTP is running on a non-standard port. This may indicate that crackers or script kiddies have set up a backdoor on the system to send spam or control the machine. Example Usage nmap -sV --script=smtp-strangeport Script Output 22/tcp open smtp | smtp-strangeport: Mail server on unusual...

[SECURITY] Fedora 8 Update: squirrelmail-1.4.16-1.fc8

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

[SECURITY] Fedora 9 Update: squirrelmail-1.4.16-1.fc9

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

Dart Communications PowerTCP FTP module - Remote Buffer Overflow

Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in your programs to perform common TCP/IP functions, including FTP,...

Dart Communications PowerTCP FTP module Remote BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================== Dart Communications PowerTCP FTP module Remote BOF Exploit ========================================================== Author: Intel Discovered by: Intel Software: PowerTCP ActiveX...

[SECURITY] Fedora 9 Update: postfix-2.5.5-1.fc9

Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, TLS...

[SECURITY] Fedora 8 Update: postfix-2.5.5-1.fc8

Postfix is a Mail Transport Agent MTA, supporting LDAP, SMTP AUTH SASL, TLS...

MailMarshal Spam Quarantine Management (SQM) Multiple Component XSS

The remote host is running MailMarshal SMTP, a mail server for Windows. The Spam Quarantine Management web component included with the version of MailMarshal SMTP installed on the remote host is affected by a persistent cross-site scripting vulnerability in its 'delegated spam management' feature...

CVE-2008-2831

Multiple cross-site scripting XSS vulnerabilities in the delegated spam management feature in the Spam Quarantine Management SQM component in MailMarshal SMTP 6.0.3.8 through 6.3.0.0 allow user-assisted remote authenticated users to inject arbitrary web script or HTML via 1 the list of blocked...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the delegated spam management feature in the Spam Quarantine Management SQM component in MailMarshal SMTP 6.0.3.8 through 6.3.0.0 allow user-assisted remote authenticated users to inject arbitrary web script or HTML via 1 the list of blocked...

CVE-2008-2831

The CVE-2008-2831 issue affects MailMarshal SMTP’s Spam Quarantine Management (SQM) web component. In versions 6.0.3.8–6.3.0.0, two XSS vectors exist in the delegated spam management UI: via the list of blocked senders and via the list of safe senders. The vulnerability allows user‑assisted remot...

CVE-2008-2831

Multiple cross-site scripting XSS vulnerabilities in the delegated spam management feature in the Spam Quarantine Management SQM component in MailMarshal SMTP 6.0.3.8 through 6.3.0.0 allow user-assisted remote authenticated users to inject arbitrary web script or HTML via 1 the list of blocked...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

default config values restored

This should be for 2.9.1 - this version was not yet available under "affects versions" when filing this bug. After updating from 2.9 to 2.9.1, most of my settings were overwritten by their default values. - public signup got enabled - the language changed back to english instead of german - e-mai...

plesk-auth.txt

Hello, the reported vulnerability allows logins to mail and probably other services protected by plesk authentication modules on at least the current Plesk 8.6.0 Unix/Linux and could eg. be used for relaying spam through gained smtp auth priviledges. Only systems which allow short mail login name...