7011 matches found
Ipswitch IMail Server/Collaboration Suite SMTP守护程序栈溢出漏洞
Ipswitch IMail Server是Ipswitch协作组件中捆绑的一个邮件服务器。 IMail在解析某些命令串时存在缓冲区溢出漏洞，成功利用这个漏洞可能导致指令执行或拒绝服务。 由于在解析包含在“@”和“:”字符中的长字符串时缺少边界检查，导致IMail Server的SMTP守护程序中存在栈溢出漏洞。 Ipswitch IMail 2006 Ipswitch Ipswitch Collaboration Suite Standard Edition 2006 Ipswitch Ipswitch Collaboration Suite Premium Edition 2006...
Symantec Mail Security for Domino邮件中继漏洞
Symantec Mail Security for Domino为Domino服务器提供高性能的集成邮件保护功能，使其能够防御病毒威胁、垃圾邮件和不受欢迎的内容。 Symantec Mail Security for Domino在处理特定格式邮件的中继时存在漏洞，此漏洞可能被垃圾邮件发送者利用来隐蔽自己。 Symantec Mail Security for Domino的Premium...
QK SMTP远程栈溢出漏洞
QK SMTP Server是一款SMTP（简单邮件传输协议）服务器软件。 QK SMTP Server在处理用户命令参数时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 QK SMTP Server在处理传送给“RCPT TO:”命令的参数时存在栈溢出漏洞，远程攻击者可以通过向服务器发送超长参数导致执行任意指令。 QKSoft QK SMTP 3.1.0 Beta QKSoft QK SMTP 3.0.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.qksoft.com/ /...
RevilloC MailServer 1.x - 'RCPT TO' Remote Denial of Service
/ ============================================================= 0-day RCPT TO DoS Exploit for RevilloC SMTP version 1.x ============================================================= Sending a large buffer 4080 bytes in conjunction with the "MAIL FOR:" or "RCPT TO:" and other commands can cause a...
QK SMTP 3.01 - 'RCPT TO' Remote Buffer Overflow (1)
/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 25\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...
CVE-2006-5478
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via 1 a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors...
Winmail Mail Server 2.3 Remote Format String Exploit
No description provided by source. / Magic Winmail Server 2.3Build 0402 Remote Format string exploit. Coded by ThreaT. This one take advantage of a format bug in the SMTP protocol not pop3 for execute a malicious command on a vulnerable system usage : mwmxploit Target IP command to execute remote...
QK SMTP <= 3.01 (RCPT TO) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ========================================================== QK SMTP GLinares.code at gmail dot com / include include include include pragma commentlib,"wsock32.lib" int mainint argc, char argv...
QK SMTP <= 3.01 (RCPT TO) Remote Denial of Service Exploit
No description provided by source. / ============================================================= 0-day RCPT TO DoS Exploit for QK SMTP version 3.01 and lower. ============================================================= Exploit affects a format string error in the RCPT TO command in which the...
QK SMTP 3.01 - RCPT TO Remote Denial of Service
QK SMTP 3.01 - RCPT TO Remote Denial of Service / ============================================================= 0-day RCPT TO DoS Exploit for QK SMTP version 3.01 and lower. ============================================================= Exploit affects a format string error in the RCPT TO command ...
QK SMTP 3.01 - 'RCPT TO' Remote Denial of Service
/ ============================================================= 0-day RCPT TO DoS Exploit for QK SMTP version 3.01 and lower. ============================================================= Exploit affects a format string error in the RCPT TO command in which the program attempts to print out the...
Symantec Mail Security for Domino Server Relay
SUMMARY Premium Antispam feature of Symantec Mail Security for Domino is vulnerable to allowing a Domino server to be used as an unintended mail relay. This could be used to relay SPAM mail anonymously. Severity Medium can be used to send SPAM Remote | Yes ---|--- Local | No Authentication Requir...
Ipswitch IMail Server 2006 / 8.x (RCPT) Remote Stack Overflow Exploit
Exploit for unknown platform in category remote exploits ===================================================================== Ipswitch IMail Server 2006 / 8.x RCPT Remote Stack Overflow Exploit ===================================================================== // IMail 2006 and 8.x SMTP Stack...
Ipswitch IMail Server 2006 8.x - RCPT Remote Stack Overflow
Ipswitch IMail Server 2006 8.x - RCPT Remote Stack Overflow // IMail 2006 and 8.x SMTP Stack Overflow Exploit // coded by Greg Linares glinares.codeatgmaildotcom // http://www.juniper.net/security/auto/vulnerabilities/vuln3414.html // This works on the following versions: // 2006 IMail prior to...
CVE-2006-5313
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...
CVE-2006-5313
CVE-2006-5313 affects Hastymail 1.5 and earlier (before 2006-10-08). A remote authenticated user can inject arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter, potentially crossing privilege boundaries depending on SMTP server configuration. This entr...
CVE-2006-5313
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...
CVE-2006-5313: Improper Input Validation
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct...
Hastymail 1.x - IMAP SMTP Command Injection
Hastymail 1.x - IMAP SMTP Command Injection source: https://www.securityfocus.com/bid/20424/info Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An authenticated malicious user could execute arbitrary IMAP / SMTP...
Hastymail 1.x - IMAP SMTP Command Injection
source: https://www.securityfocus.com/bid/20424/info Hastymail is prone to an IMAP / SMTP command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An authenticated malicious user could execute arbitrary IMAP / SMTP commands on the affected mail server...