5881 matches found
Qbik WinGate format string vulnerability
Unsafe vsprintf call on invalid SMTP command...
WinGate < 6.2.2 Invalid SMTP State Remote DoS
Binary data 4166.prm...
[HS-A007] Qbik WinGate Remote Denial of Service
Title ===== HS-A007 Qbik WinGate Remote Denial of Service Date ==== 10 August 2007 Affected Software ================= WinGate versions 5.x and 6.x prior to 6.2.2. Overview ======== WinGate by Qbik IP Management Limited is a sophisticated gateway and server product used in over 600,000 networks...
WinGate Invalid SMTP State Format String DoS
The remote host appears to be running WinGate, a Windows application for managing and securing Internet access. The version of WinGate installed on the remote host fails to sanitize user-supplied input to its SMTP server component of format strings before using it to log a problem. By connecting ...
SquirrelMail G/PGP plugin: Arbitrary code execution
Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP protocols. Description The functions deletekey, gpgchecksignpgpmime and gpgrecvkey used in the SquirrelMail G/PGP encryption plugin do not properly escape user-supplied data. Impact An authenticated user could...
CVE-2007-4296
Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server ASSP 1.3.3 has unknown impact and attack vectors...
Code injection
Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server ASSP 1.3.3 has unknown impact and attack vectors...
CVE-2007-4296
Technical details (affected software/component, root cause, impact or fix) are not publicly provided in the provided documents. Monitor for updates; current sources describe an unspecified vulnerability in assp.pl for Anti-Spam SMTP Proxy Server 1.3.3 with unknown impact.
CVE-2007-4296
Unspecified vulnerability in assp.pl in Anti-Spam SMTP Proxy Server ASSP 1.3.3 has unknown impact and attack vectors...
[SECURITY] Fedora 7 Update: balsa-2.3.17-2.fc7
Balsa is a GNOME email client which supports mbox, maildir, and mh local mailboxes, and IMAP4 and POP3 remote mailboxes. Email can be sent via sendmail or SMTP. Optional multithreading support allows for non-intrusive retrieval and sending of mail. A finished GUI similar to that of the Eudora ema...
fetchmail -- denial of service on reject of local warning message
Matthias Andree reports: fetchmail will generate warning messages in certain circumstances for instance, when leaving oversized messages on the server or login to the upstream fails and send them to the local postmaster or the user running it. If this warning message is then refused by the SMTP...
[Full-disclosure] [Sec-1 Ltd] Advisory: MailMarshal Spam Quarantine Password Retrieval Vulnerability
SEC-1 LTD. www.sec-1.com Security Advisory Advisory Name: MailMarshal Spam Quarantine Password Retrieval Vulnerability Release Date: 17-06-2007 Application: MailMarshal SMTP 6.2.0.x Platform: Microsoft Windows Severity: Password Retrieval Author: Gary O'leary-Steele Reported: See time line sectio...
CVE-2007-3796
The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer...
Sql injection
The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer...
CVE-2007-3796
The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remote attackers to modify arbitrary account information via a UserId variable with a large amount of trailing whitespace followed by a malicious value, which triggers SQL buffer...
CVE-2007-3796
CVE-2007-3796 affects MailMarshal SMTP’s Spam Quarantine HTTP interface. The vulnerability stems from the password reset feature, where a UserId value with excessive trailing whitespace followed by a malicious value can trigger SQL buffer truncation due to length inconsistencies, potentially allo...
KLA10247 Vulnerability in MailMArshal SMTP
An unspecified vulnerability was found in MailMarshal SMTP. By exploiting this vulnerability malicious users can modify arbitrary account information. This vulnerability can be exploited remotely via a specially designed UserId variable. Original advisories - Related products M86-MailMarshal-SMTP...
Authentication flaw
The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists...