CVE-2008-0140: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the selectedtheme parameter, a different vector than CVE-2007-3172...

CVE-2007-6457

Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...

Stack overflow

Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...

CVE-2007-6457

Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...

CVE-2007-6457

Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...

CVE-2007-6457

CVE-2007-6457: SurgeMail 38k4 webmail has a stack-based buffer overflow in its webmail feature; a long Host header can trigger remote DoS (crash). Impact is partial availability. Public fix/remediation details are not provided in the provided documents; monitor for updates.

CVE-2007-6457: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service crash via a long Host header...

SurgeMail v.38k4 webmail Host header Denial of Service Exploit

No description provided by source. ?php / SurgeMail v.38k4 webmail Host header denial of service exploit tested against the windows version rgod / dl"phpcurl.so"; $url = "http://192.168.0.1"; $puf=strrepeat0xff,0xfff; $header ="POST / HTTP/1.0\r\n"; $header.="Host: $puf\r\n"; $header.="Connection...

SurgeMail v.38k4 webmail Host header Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================== SurgeMail v.38k4 webmail Host header Denial of Service Exploit ============================================================== 0day.today 2018-04-11...

SurgeMail畸形HOST头字段数据拒绝服务漏洞

SurgeMail是一款WEB MAIL应用程序。 SurgeMail不正确处理HTTP POST请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于不正确处理HTTP POST提交的HOST字段数据，可导致应用程序崩溃，造成拒绝服务攻击。 NetWin SurgeMail 38k4 目前没有解决方案提供： http://www.netwinsite.com/surgemail/ ?php / SurgeMail v.38k4 webmail Host header denial of service exploit tested against the windows...

Surgemail 38k4 - webmail Host header Denial of Service

Surgemail 38k4 - webmail Host header Denial of Service milw0rm.com 2007-12-18...

surgemail-crash.txt

original url: http://retrogod.altervista.org/rgodsurgemailcrash.html...

SurgeMail v.38k4 webmail Host header crash

?php / SurgeMail v.38k4 webmail Host header denial of service exploit tested against the windows version rgod / dl"phpcurl.so"; $url = "http://192.168.0.1"; $puf=strrepeat0xff,0xfff; $header ="POST / HTTP/1.0rn"; $header.="Host: $pufrn"; $header.="Connection: Closernrn"; $ch = curlinit;...

Surgemail 38k4 - webmail Host header Denial of Service

milw0rm.com 2007-12-18...

Unfixed XSS vulnerability at www.invertred.com

Security researcher TreX, has submitted on 15/12/2007 a cross-site-scripting XSS vulnerability affecting www.invertred.com, which at the time of submission ranked 685084 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currentl...

Unsanitized scripting in RoundCube webmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Site address: http://roundcube.net/ Roundcube webmail does not sanitize Microsoft Internet Explorer scripting issues reported by Yosuke Hasegawa. Author was contacted on 2007-05-11. I haven't received any response and current 2007-12-09 code is still...

DEBIAN-CVE-2007-6321

Cross-site scripting XSS vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands...

CVE-2007-6321

Cross-site scripting XSS vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands...

CVE-2007-6321

Cross-site scripting XSS vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands...

Cross site scripting

Cross-site scripting XSS vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands...