[SECURITY] Fedora Core 6 Update: squirrelmail-1.4.10a-1.fc6

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

Microsoft Exchange iCal请求远程拒绝服务漏洞（MS07-026）

Microsoft Exchange Server是一款流行的邮件服务器。 Microsoft Exchange中负责解析iCal邮件附件的代码中漏洞，远程攻击者可能利用此漏洞导致Exchange进程崩溃。 iCal文件格式包含有一系列的记录，由BEGIN和END标签划分开，每个记录都可能包含有多个命名属性。Exchange的iCal解析器维护一个当前环境中有效属性的表格，遇到新的记录就会切换到合适的表格。X-MICROSOFT-CDO-MODPROPS属性是一个Microsoft扩展，允许iCal文件指定特定记录中应认为有效的属性列表，这时Exchange会乎略所有其他属性，如下所示：...

Multiple vendors ZOO file decompression infinite loop DoS

Topic: Multiple vendors ZOO file decompression infinite loop DoS Announced: 2007-05-04 Credits: Jean-Sebastien Guay-Leroux Products: Multiple see section III Impact: DoS 99 CPU utilisation CVE ID: CVE-2007-1669, CVE-2007-1670, CVE-2007-1671, CVE-2007-1672, CVE-2007-1673 I. BACKGROUND Zoo is a...

MERCUR imapd NTLMSSP

Added: 04/03/2007 CVE: CVE-2007-1578 BID: 23058 OSVDB: 33545 Background MERCUR Messaging Server is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in MERCUR Messaging Server allows remote attackers to execute arbitrary...

B21Soft BASP21 SMTP lines injections

Invalid handling of "." character allows to inject SMTP commands into message...

MS02-012: Malformed Data Transfer Request can Cause Windows SMTP Service to Fail (313450)

The remote host contains a flaw in its SMTP service that could allow an attacker to crash it. Vulnerable services are SMTP service Windows XP/Windows 2000 and Exchange 2000 Windows 2000. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20885; scriptversion"1.29";...

MERCUR imapd SUBSCRIBE command buffer overflow

Added: 03/27/2007 CVE: CVE-2007-1579 BID: 23050 OSVDB: 33546 Background MERCUR Messaging Server is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability allows remote, authenticated attackers to execute arbitrary commands by...

[Full-disclosure] Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability

Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability Successfully Tested on Windows Vista Ultimate Greetings fly out to Alex,wtfomg,Thierry,Andi and Blackzero Description Windows Mail is the default Mail Client of Microsoft Windows Vista. Vulnerability Remote Code...

Data anonymiser does not blank out SMTP server username and password

SMTP server username and password are readable in database/xml export: This can possible security leak e.g. when you sent support request, where you send database export to support. Anonymizer does not remove these values. ---- Username and password should be encoded format in database...

Data anonymiser does not blank out SMTP server username and password

SMTP server username and password are readable in database/xml export: This can possible security leak e.g. when you sent support request, where you send database export to support. Anonymizer does not remove these values. ---- Username and password should be encoded format in database...

Data anonymiser does not blank out SMTP server username and password

SMTP server username and password are readable in database/xml export: This can possible security leak e.g. when you sent support request, where you send database export to support. Anonymizer does not remove these values. ---- Username and password should be encoded format in database...

Symantec Mail Security for SMTP Message Handling Arbitrary Code Execution

Symantec Mail Security for SMTP, which provides antispam and anti- virus protection for the IIS SMTP Service, is installed on the remote Windows host. There is reportedly an issue with the version of Symantec Mail Security for SMTP on the remote host that can be triggered by messages with malform...

Symantec Mail Security for SMTP Admin Center Default Credentials

Symantec Mail Security for SMTP, which provides anti-spam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The installation of SMS for SMTP on the remote host uses a default username / password combination to control access to its administrative control...

CVE-2007-1252

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...

Buffer overflow

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...

CVE-2007-1252

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...

CVE-2007-1252

Symantec Mail Security for SMTP (SMS for SMTP) vulnerable to a buffer overflow when processing malformed email headers in version 5.0 before Patch 175. The issue can crash the affected service and may allow arbitrary code execution. Exploitation, if achieved, would grant an attacker full control ...

CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service crash via 1 "long command lines at port 32000" and 2 certain name service queries that are not properly handled by the SMTP service...

CVE-2006-7041

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service infinite loop via a message in which neither the originator nor recipient address is known...

CVE-2006-7041

The CVE-2006-7041 entry concerns MERCUR Messaging 2005 before Service Pack 4, where the SMTP service is vulnerable to a denial-of-service (infinite loop) triggered by a message with neither originator nor recipient address known. Public sources (NVD/NIST) describe this as a remote DoS with CVSSv2...