5885 matches found
CVE-2007-6573
QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...
Design/Logic Flaw
QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...
CVE-2007-6573
QK SMTP Server 3 allows remote attackers to cause a denial of service daemon crash via a long 1 HELO, 2 MAIL FROM, or 3 RCPT TO command; or 4 a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551...
CVE-2007-6573
Summary: CVE-2007-6573 affects QK SMTP Server, with a denial-of-service condition triggered by abnormally long commands (HELO, MAIL FROM, RCPT TO) or a long DATA payload. The connected OpenVAS entries describe a stack-based overflow in the RCPT TO handling, implying a potential crash of the SMTP ...
mailmachine-sql.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...
MailMachine Pro 2.2.4 Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...
MailMachine Pro 2.2.4 - SQL Injection
MailMachine Pro 2.2.4 - SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
CVE-2007-5855
Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, can use plaintext authentication even when MD5 Challenge-Response authentication is available, which makes it easier for remote attackers to sniff account activity...
Authentication flaw
Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, can use plaintext authentication even when MD5 Challenge-Response authentication is available, which makes it easier for remote attackers to sniff account activity...
CVE-2007-5855
The CVE-2007-5855 entry is supported by connected documents: Apple Mail on Mac OS X 10.4.11 and 10.5.1 can use plaintext SMTP authentication via Account Assistant even when MD5 Challenge-Response is available, enabling potential remote sniffing of account activity. The issue is tied to the SMTP a...
QK SMTP Server畸形命令多个远程拒绝服务漏洞
QK SMTP Server是一款SMTP服务程序。 QK SMTP Server不正确处理多个命令，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 对如下命令参数缺少充分过滤，可导致应用程序崩溃，停止响应： HELO ../A/ 950 AIL FROM: ../A/ 950 RCPT TO: ../A/ 950 data ../A/ 950 QKSoft QK SMTP 3 目前没有解决方案提供： http://www.qksoft.com/...
QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities
QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these...
QK SMTP Server - Malformed Commands Multiple Remote Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these issues to crash the affected application, denying service to legitimate users. These...
QK SMTP Server 3 - Denial of service
Apparently this SMTP server crashes when creating a mail poorly trained causing a denial of service. Proof-of-concept HELO ../A/ 950 MAIL FROM: ../A/ 950 RCPT TO: ../A/ 950 data ../A/ 950 . Juan Pablo Lopez Yacubian http://fuzzertina.blogspot.com/...
QK SMTP Server DoS
No description provided...
Debian DSA-1410-1 : ruby1.8 - programming error
Several vulnerabilities have been discovered in Ruby, an object-oriented scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5162 It was discovered that the Ruby HTTPS module performs insufficient validation of SSL certificates, whic...
Debian DSA-1412-1 : ruby1.9 - programming error
Several vulnerabilities have been discovered in Ruby, an object-oriented scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5162 It was discovered that the Ruby HTTPS module performs insufficient validation of SSL certificates, whic...
[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation
------------------------------------------------------------------------ Debian Security Advisory DSA-1411-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...
