CVE-2000-0552

ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information...

(SRADV00003) Arbitrary file disclosure through IMP

================================================= Secure Reality Pty Ltd. Security Advisory 3 SRADV00003 http://www.securereality.com.au ================================================= Title Arbitrary file disclosure through IMP Released 12/09/2000 Vulnerable Most all? versions of IMP 2.2.1...

horde.txt

Date: Fri, 8 Sep 2000 17:03:36 +0200 Sender: Bugtraq List From: "Winter, Christian" Subject: horde library bug - unchecked from-address To: [email protected] Hi, this bug we discovered recently. HORDE 1.2.0 $from-bug and how to exploit with IMP 2.2.0 Disclaimer: This is intended as a pape...

horde library bug - unchecked from-address

Hi, this bug we discovered recently. HORDE 1.2.0 $from-bug and how to exploit with IMP 2.2.0 Disclaimer: This is intended as a paper for sysadmins who want to secure their systems. It is NOT a how to for scriptkiddies to run any attack on a IMP-using site. The authors of this text will not be hel...

Web Application Security Survey

-Web Application Security Survey- Results show that Microsoft Hotmail, Excite, Altavista, E-Bay, Lycos Netscape WebMail, E-Trade, Infoseek/Go.com and their users are all currently vulnerable to web based attack. disclaimer The opinions, ideas and information expressed in the following text are my...

DoS против WebMail

Переполнение буфера в SMTP-команде HELO. В CMail - переполнение буфера при длинном имени пользователя в веб-интерфейсе порт 8002...

CVE-2000-0507

Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command...

DST2K0006: Denial of Service Possibility in Imate WebMail Server v2.5

========================================================================== ====== Delphis Consulting Plc ========================================================================== ====== Security Team Advisories 26/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

CVE-2000-0239

Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mailuser parameter in the GET request...

CVE-2000-0239

CVE-2000-0239 concerns the MERCUR WebView WebMail server. A buffer overflow is triggered by a long mail_user parameter in a GET request (e.g., /mmain.html&mail_user=…); this can cause a denial of service and, per the Nessus plugin, potentially allow arbitrary code execution on a remote host. Affe...

Atrium Software Mercur WebView WebMail-Client 1.0 - Buffer Overflow

Atrium Software Mercur WebView WebMail-Client 1.0 - Buffer Overflow source: https://www.securityfocus.com/bid/1056/info WebView WebMail-Client is an add-on for the Mercur SMTP/POP3/IMAP4 Mail Server which allows a user to access email through a web browser. Insufficient boundary checking exists i...

Atrium Software Mercur WebView WebMail-Client 1.0 - Buffer Overflow

source: https://www.securityfocus.com/bid/1056/info WebView WebMail-Client is an add-on for the Mercur SMTP/POP3/IMAP4 Mail Server which allows a user to access email through a web browser. Insufficient boundary checking exists in the code which handles GET requests, specifically on port 1080...

CVE-2000-0239

Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mailuser parameter in the GET request...

MERCUR WebView WebMail Server mail_user Parameter DoS

The remote WebView service does not do proper bounds checking when processing the following request : GET /mmain.html&mailuser=aaa...aaa A remote attacker could exploit this to crash the service, or potentially execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

A-V Tronics InetServ 3.0 - WebMail GET

A-V Tronics InetServ 3.0 - WebMail GET / source: https://www.securityfocus.com/bid/949/info InetServ is a freeware mail server for 32 bit Windows systems. One of the features of this program is webmail, which allows mail to be read from any browser. There is an unchecked buffer in the code that...

A-V Tronics InetServ 3.0 - WebMail GET

/ source: https://www.securityfocus.com/bid/949/info InetServ is a freeware mail server for 32 bit Windows systems. One of the features of this program is webmail, which allows mail to be read from any browser. There is an unchecked buffer in the code that parses the GET requests, and a request o...

bigfoot-bellsouth-webmail.txt

Date: Fri, 8 Jan 1999 07:07:20 -0600 From: "Madere, Russel" To: [email protected] Subject: Bigfoot/Bellsouth Webmail bug I seem to have found another "bug" with the Bigfoot/Bellsouth Webmail. Users can log back into the service from cached pages. This is a huge security hole, especially for...