5881 matches found
CVE-2006-5313
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...
CVE-2006-5313
CVE-2006-5313 affects Hastymail 1.5 and earlier (before 2006-10-08). A remote authenticated user can inject arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter, potentially crossing privilege boundaries depending on SMTP server configuration. This entr...
CVE-2006-5313
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...
YPOPS 0.6 Buffer Overflow
This module exploits a stack buffer overflow in the YPOPS POP3 service. This is a classic stack buffer overflow for YPOPS version 0.6. Possibly Affected version 0.5, 0.4.5.1, 0.4.5. Eip point to jmp ebx opcode in ws32.dll This module requires Metasploit: https://metasploit.com/download Current...
Hastymail 1.x - IMAP SMTP Command Injection
Hastymail 1.x - IMAP SMTP Command Injection source: https://www.securityfocus.com/bid/20424/info Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An authenticated malicious user could execute arbitrary IMAP / SMTP...
Hastymail 1.x - IMAP SMTP Command Injection
source: https://www.securityfocus.com/bid/20424/info Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An authenticated malicious user could execute arbitrary IMAP / SMTP commands on the affected mail server...
eXtremail 1.x2.1 - Remote Format String (3)
eXtremail 1.x2.1 - Remote Format String 3 source: https://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously...
Multiple MailEnable Mail server vulnerabilities
Multiple buffer overflows and DoS conditions on SMTP NTLM authentication...
MailEnable SMTP Connector Multiple NTLM Authentication Vulnerabilities
The remote host is running MailEnable, a commercial mail server for Windows. The version of MailEnable Professional or MailEnable Enterprise installed on the remote host has several problems involving its support of NTLM authentication. A remote, unauthenticated attacker can leverage these flaws ...
[Full-disclosure] [MU-200609-01] Multiple Pre-Authentication Vulnerabilities in MailEnable SMTP
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Pre-Authentication Vulnerabilities in MailEnable SMTP MU-200609-01 September 29, 2006 http://labs.musecurity.com/advisories.html Affected Product/Versions: MailEnable Professional 2.0 MailEnable Enterprise 2.0 Product Overview: "MailEnable's...
IMail SMTP RCPT TO buffer overflow
Added: 09/29/2006 CVE: CVE-2006-4379 BID: 19885 OSVDB: 28576 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the SMTP daemon allows remote command execution by sending a RCPT TO argument containing a long string between @ and : characters...
IMail SMTP RCPT TO buffer overflow
Added: 09/29/2006 CVE: CVE-2006-4379 BID: 19885 OSVDB: 28576 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the SMTP daemon allows remote command execution by sending a RCPT TO argument containing a long string between @ and : characters...
IMail SMTP RCPT TO buffer overflow
Added: 09/29/2006 CVE: CVE-2006-4379 BID: 19885 OSVDB: 28576 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the SMTP daemon allows remote command execution by sending a RCPT TO argument containing a long string between @ and : characters...
IMail SMTP RCPT TO buffer overflow
Added: 09/29/2006 CVE: CVE-2006-4379 BID: 19885 OSVDB: 28576 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the SMTP daemon allows remote command execution by sending a RCPT TO argument containing a long string between @ and : characters...
MailEnable SMTP Connector Service SPF Record Crafted Lookup DoS
The remote host is running MailEnable, a commercial mail server for Windows. The SMTP server bundled with the version of MailEnable installed on the remote host is affected by a flaw in which SPF lookups for domains with large records may result in a NULL pointer exception in the SMTP service. An...
Immunity Canvas: IMAIL_RCPTOVERFLOW
Name| imailrcptoverflow ---|--- CVE| CVE-2006-4379 Exploit Pack| CANVAS Description| IMail SMTPD32 Stack Overflow Notes| CVE Name: CVE-2006-4379 VENDOR: IPSwitch Post-exploitaion: Post-exploitation requires stoping and starting the IMail SMTP Server Service From a different process use...
CVE-2006-4379
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character...
CVE-2006-4379
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character...
Ipswitch Collaboration Suite SMTP Server Stack Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ipswitch Collaboration Suite and IMail. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMTP daemon. A lack of bounds checking during the parsing o...