IA WebMail Server 3.0/3.1 - GET Buffer Overrun

source: https://www.securityfocus.com/bid/8965/info IA WebMail Server is said to be prone to a remote buffer overrun that could allow an attacker to execute arbitrary code. The problem occurs due to insufficient bounds checking when handling GET requests. As a result, an attacker may be capable o...

IA WebMail Server 3.x Buffer Overflow Vulnerability

IA WebMail Server 3.x Buffer Overflow Vulnerability Credit: Author : Peter Winter-Smith Software: Package : IA WebMail Server Versions : All up to and including 3.1 Vendor : True North Software Vendor Url : http://www.tnsoft.com Vulnerability: Bug Type : Stack-based Buffer Overflow Severity :...

IA WebMail buffer overflow

Stack overflow on oversized HTTP GET request...

IA WebMail Server 3.03.1 - GET Buffer Overrun

IA WebMail Server 3.03.1 - GET Buffer Overrun source: https://www.securityfocus.com/bid/8965/info IA WebMail Server is said to be prone to a remote buffer overrun that could allow an attacker to execute arbitrary code. The problem occurs due to insufficient bounds checking when handling GET...

lansuite2003.txt

TITLE ===== 602Pro Lansuite 2003 - Multiple Vulnerabilities DESCRIPTION =========== “602Pro LAN SUITE is an easy-to-install and manage all-in-one server application. Its standards-based SMTP/POP3 e-mail server provides effective e-mail communication without the risk of destructive virus...

software602 602pro lan suite 2003 - Directory Traversal

software602 602pro lan suite 2003 - Directory Traversal source: https://www.securityfocus.com/bid/8701/info A problem with the handling of directory traversal requests has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentially...

Remote Execution of Commands in Omail Webmail 0.98.4 and earlier

Product: Omail Webmail Author: Olivier Mueller Vulnerable Versions: - 0.98.x - 0.97.x - ... Omail is a Webmail coded in perl for qmail, optionally with vmailmgr or vpopmail. There is a security flaw in Omail which, if installed by default, allows for remote root access. The minimum risk is exposu...

CVE-2003-1202

The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 password, 2 domainname, or 3 username...

Kerio MailServer 5.6.3 - Remote Buffer Overflow

/ Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid authentication / / details, it is...

iXmail index.php password Parameter SQL Injection

The remote host is running the iXmail webmail interface. There is a flaw in this interface that allows an attacker to log in as any user by using a SQL injection flaw in the code of index.php. An attacker may use this flaw to gain unauthorized access on this host, or to gain the control of the...

iXmail Multiple Script Arbitrary File Manipulation

The remote host is running the iXmail webmail interface. There is a flaw in this interface which allows an attacker who has a valid account on this host to upload and execute arbitrary php files on this host, thus potentially gaining a shell on this host. An attacker may also use this flaw to...

[KSA-002] Multiple Vulnerabilities In Moregroupware

PROGRAM: Moregroupware HOMEPAGE: http://www.moregroupware.com/ VULNERABLE VERSIONS: 0.6.7 and prior ? RISK: Low/Medium IMPACT: Cross Site Scripting RELEASE DATE: 2003-06-26 ================================================= TABLE OF CONTENTS =================================================...

TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6

TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6 contributed by: rushjo ========================================================================= Tripbit Security Advisory TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6...

VisNetic WebMail 5.8.6 .6 - Information Disclosure

VisNetic WebMail 5.8.6 .6 - Information Disclosure source: https://www.securityfocus.com/bid/8018/info VisNetic WebMail is prone to an information disclosure vulnerability. Reportedly, by appending a dot '.' character to the end of a URI request to WebMail, the source code of PHP files may be...

VisNetic WebMail 5.8.6 .6 - Information Disclosure

source: https://www.securityfocus.com/bid/8018/info VisNetic WebMail is prone to an information disclosure vulnerability. Reportedly, by appending a dot '.' character to the end of a URI request to WebMail, the source code of PHP files may be returned in the web browser...

Multiple buffer overflows and XSS in Kerio MailServer

Issue : Multiple buffer overflows and XSS in Kerio MailServer Version affected 5.6.3 last in kerio website Vendor status : Vendor was notified Description : Kerio develop a mail server with support for Imap , Pop3, Smtp and SSL protocols . Besides , it includes a webmail . This webmail is...

Kerio Mail Server multiple bugs

Multiple buffer overflows in WebMail interface. Crossite scripting...

Kerio MailServer 5.6.3 do_map Module - Overflow

Kerio MailServer 5.6.3 domap Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs...

Kerio MailServer 5.6.3 subscribe Module - Overflow

Kerio MailServer 5.6.3 subscribe Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely...

Kerio MailServer 5.6.3 list Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...