CVE-2001-1283

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service crash via a mailbox name that contains a large number of . dot or other characters to programs such as 1 readmail.cgi or 2 printmail.cgi, possibly due to a buffer overflow that...

AVTronics InetServer DoS and BoF Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= AVTronics InetServer DoS and BoF Vulnerabilities =- Release date: Wednesday, August 22, 2001 Introduction: AVTronics InetServer is a freeware product suite for MS Windows, bundling such services as SMTP, POP3, Daytime and Telnet in 1 produc...

CVE-2001-1294

Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service crash in the Webmail interface via a long username and password...

cobalt.webmail.txt

I just got a new Cobalt Cube today and I have been poking around at it for security issues... I noticed this minor issue in the webmail system. Your users are not aloud to have shell access by default however if they malform their mailbox requests they can read local files with the perms of the...

Обратный путь в директориях в Basilix Webmail (directory traversal)

No description provided...

basilix bug

+--------------------------------------+ | Basilix Webmail System Vulnerability | +--------------------------------------+ Release Date : 13:49, 6 July 2001 Version Affected : Basilix Webmail System 1.0.2beta Basilix Webmail System 1.0.3beta Description : basilix lunches a file which name is read...

CVE-2001-1045

Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. dot dot in the requestidDUMMY parameter...

Cobalt Cube Webmail directory traversal

I just got a new Cobalt Cube today and I have been poking around at it for security issues... I noticed this minor issue in the webmail system. Your users are not aloud to have shell access by default however if they malform their mailbox requests they can read local files with the perms of the...

Basilix Webmail 1.0 - File Disclosure

Basilix Webmail 1.0 - File Disclosure source: https://www.securityfocus.com/bid/2995/info Basilix is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. During operation, Basilix opens a PHP include file using a variable as...

Basilix Webmail 1.0 - File Disclosure

source: https://www.securityfocus.com/bid/2995/info Basilix is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. During operation, Basilix opens a PHP include file using a variable as the filename that can be supplied...

CVE-2001-1408

Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. dot dot in the mailbox parameter...

Cobalt Qube Webmail 1.0 - Directory Traversal

Cobalt Qube Webmail 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/2987/info Cobalt Qube is an fully-featured network "server appliance". It includes pre-installed tools and applications and can be put online with very little configuration. A vulnerability in Cobalt Qube's...

Cobalt Qube Webmail 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/2987/info Cobalt Qube is an fully-featured network "server appliance". It includes pre-installed tools and applications and can be put online with very little configuration. A vulnerability in Cobalt Qube's webmail implementation allows remote attackers t...

TWIG SQL query bugs

I can't find the person who really in charge on developing twig, so I mail about this bug to the person who announce new version of twig about two month ago. -------------------------------------------------------------------------- Subject: Unquoted SQL query = potential damage Software package:...

CVE-2001-0021

MailMan Webmail 3.0.25 and earlier is affected by an arbitrary command execution vulnerability in mmstdod.cgi. Input to the ALTERNATE_TEMPLATES/alternate_template parameters is not properly sanitized, allowing a remote attacker to execute arbitrary commands. The issue is documented in CVE-2001-00...

CVE-2001-0021

MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternatetemplate parameter...

[GSA2001-01] PHP IMAP overflow fix problems

geekgang Security Advisory gsa2001-01 www.geekgang.co.uk © Copyright 2001 geekgang ID: geekgang GSA2001-01 01 v1.0 Topic: PHP IMAP overflow fix problems Status: Released 5th March, 2001 Author: pre Abstract PHP 4.0.4 contains a fix for a buffer overflow in the imap module. Unfortunately this fix...

CVE-2001-0021

MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternatetemplate parameter...

Basilix Webmail .class / .inc Direct Request Remote Information Disclosure

It is possible to download the include files on the remote BasiliX webmail service. An attacker may use these to obtain the MySQL authentication credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10601;...

Basilix Webmail System *.class *.inc Permission Vulnerability

--------------------------------------------------- tamersahin.net Security Solutions Announcement --------------------------------------------------- Basilix Webmail System .class .inc Permission Vulnerability Release Date: January 12, 2001 Version Affected: Basilix Webmail System 0.9.7beta...