Trlinux Postaci Webmail 1.1.3 - Password Disclosure

source: https://www.securityfocus.com/bid/2029/info Postaci Webmail is a database-driven web e-mail system. PostACI contains a vulnerability in its default configuration that may allow a remote attacker to gain access to the underlying database. Webmail stores database username and password...

Trlinux Postaci Webmail 1.1.3 - Password Disclosure

Trlinux Postaci Webmail 1.1.3 - Password Disclosure source: https://www.securityfocus.com/bid/2029/info Postaci Webmail is a database-driven web e-mail system. PostACI contains a vulnerability in its default configuration that may allow a remote attacker to gain access to the underlying database...

Дырка в TWIG webmail

Используя ошибку в проверке агрументов можно загрузить и выполнить собственный php3-скрипт...

Security problems with TWIG webmail system

Twig is a popular webmail system written in PHP, once called Muppet. Author: Christopher Heschong Homepage: http://twig.screwdriver.net Version: 2.5.1 latest Problem: The possibility of processing our own php file , can leed to arbitrary command execution on the server as the httpd user. Status:...

CVE-2000-0507

CVE-2000-0507 concerns Imate Webmail Server 2.5. A remote attacker can cause a denial of service by sending a HELO command with an extremely long argument, potentially crashing/shutting down the SMTP service (network exploit, no auth required; availability impact). The vulnerability stems from ha...

CVE-2000-0552

ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information...

CVE-2000-0507

Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command...

CVE-2000-0507: Undefined Security Weakness

Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command...

(SRADV00003) Arbitrary file disclosure through IMP

================================================= Secure Reality Pty Ltd. Security Advisory 3 SRADV00003 http://www.securereality.com.au ================================================= Title Arbitrary file disclosure through IMP Released 12/09/2000 Vulnerable Most all? versions of IMP 2.2.1...

horde.txt

Date: Fri, 8 Sep 2000 17:03:36 +0200 Sender: Bugtraq List From: "Winter, Christian" Subject: horde library bug - unchecked from-address To: [email protected] Hi, this bug we discovered recently. HORDE 1.2.0 $from-bug and how to exploit with IMP 2.2.0 Disclaimer: This is intended as a pape...

horde library bug - unchecked from-address

Hi, this bug we discovered recently. HORDE 1.2.0 $from-bug and how to exploit with IMP 2.2.0 Disclaimer: This is intended as a paper for sysadmins who want to secure their systems. It is NOT a how to for scriptkiddies to run any attack on a IMP-using site. The authors of this text will not be hel...

Web Application Security Survey

-Web Application Security Survey- Results show that Microsoft Hotmail, Excite, Altavista, E-Bay, Lycos Netscape WebMail, E-Trade, Infoseek/Go.com and their users are all currently vulnerable to web based attack. disclaimer The opinions, ideas and information expressed in the following text are my...

DoS против WebMail

Переполнение буфера в SMTP-команде HELO. В CMail - переполнение буфера при длинном имени пользователя в веб-интерфейсе порт 8002...

CVE-2000-0507

Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command...

DST2K0006: Denial of Service Possibility in Imate WebMail Server v2.5

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 26/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

CVE-2000-0239

CVE-2000-0239 concerns the MERCUR WebView WebMail server. A buffer overflow is triggered by a long mail_user parameter in a GET request (e.g., /mmain.html&mail_user=…); this can cause a denial of service and, per the Nessus plugin, potentially allow arbitrary code execution on a remote host. Affe...

CVE-2000-0239

Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mailuser parameter in the GET request...

CVE-2000-0239: Undefined Security Weakness

Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mailuser parameter in the GET request...

Atrium Software Mercur WebView WebMail-Client 1.0 - Buffer Overflow

Atrium Software Mercur WebView WebMail-Client 1.0 - Buffer Overflow source: https://www.securityfocus.com/bid/1056/info WebView WebMail-Client is an add-on for the Mercur SMTP/POP3/IMAP4 Mail Server which allows a user to access email through a web browser. Insufficient boundary checking exists i...

Atrium Software Mercur WebView WebMail-Client 1.0 - Buffer Overflow

source: https://www.securityfocus.com/bid/1056/info WebView WebMail-Client is an add-on for the Mercur SMTP/POP3/IMAP4 Mail Server which allows a user to access email through a web browser. Insufficient boundary checking exists in the code which handles GET requests, specifically on port 1080...