Kerio Mail Server multiple bugs

Multiple buffer overflows in WebMail interface. Crossite scripting...

Kerio MailServer 5.6.3 do_map Module - Overflow

Kerio MailServer 5.6.3 domap Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs...

Kerio MailServer 5.6.3 subscribe Module - Overflow

Kerio MailServer 5.6.3 subscribe Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely...

Kerio MailServer 5.6.3 list Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio MailServer 5.6.3 list Module - Overflow

Kerio MailServer 5.6.3 list Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs...

SquirrelMail Multiple Remote Vulnerabilities

The remote host is running SquirrelMail, a web-based mail server. There is a flaw in the remote installation that could allow an attacker with a valid webmail account to read, move and delete arbitrary files on this server, with the privileges of the HTTP server. %NASLMINLEVEL 70300 C Tenable...

Kerio MailServer 5.6.3 subscribe Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio MailServer 5.6.3 add_acl Module - Overflow

Kerio MailServer 5.6.3 addacl Module - Overflow source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occur...

Kerio MailServer 5.6.3 add_acl Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Kerio MailServer 5.6.3 do_map Module - Overflow

source: https://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to insufficient bounds checking. Due to th...

Mailtraq 2.2 - Webmail Utility Full Path Disclosure

Mailtraq 2.2 - Webmail Utility Full Path Disclosure source: https://www.securityfocus.com/bid/7815/info A vulnerability has been reported for Mailtraq that may result in the disclosure of path information. The vulnerability exists due to insufficient sanitization of HTTP requests. Specifically, a...

Mailtraq 2.2 - Webmail Utility Full Path Disclosure

source: https://www.securityfocus.com/bid/7815/info A vulnerability has been reported for Mailtraq that may result in the disclosure of path information. The vulnerability exists due to insufficient sanitization of HTTP requests. Specifically, a request for non-existent resources will result in a...

SLMail WebMail Multiple Remote Overflows

The remote host is running a version of the SLmail WebMail server which is vulnerable to various flaws. These flaws may let a user to execute arbitrary code on this host or read arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Refs: From: "NGSSoftware Insight Security Researc...

MailMaxWeb Cookie Application Path Disclosure

The remote server is running MailMaxWeb, a webmail application. The version running on the remote host stores the absolute path of this install in the cookie. A remote attacker could use this information to mount further attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Session Hijacking in CommunigatePro

In webmail interface session identifier is passed to server as a part of GET requiest, thouse may be discovered by third party via Referer: field...

CommuniGate Pro Webmail 4.0.6 - Session Hijacking

CommuniGate Pro Webmail 4.0.6 - Session Hijacking !/usr/bin/perl Below is exploit code. Place it into cgi-bin, then recommended make symlink from DocumentRoot/AnyImage.gif to shj.pl, configure at least $url variable, and possible other vars and send victim HTML message with img src to your...

CommuniGate Pro Webmail 4.0.6 Session Hijacking Exploit

Exploit for linux platform in category remote exploits ======================================================= CommuniGate Pro Webmail 4.0.6 Session Hijacking Exploit ======================================================= !/usr/bin/perl Below is exploit code. Place it into cgi-bin, then...

SAMBAR WebMail authentication cleartext passwords

Cleartext poassword authentication in WebMail access...

CVE-2002-1004

CVE-2002-1004 concerns ArGoSoft Mail Server Plus/Pro WebMail (≤1.8.1.5). The vulnerability is a directory traversal in the WebMail interface that allows remote attackers to read arbitrary files via …/ sequence in a URL. Affected: ArGoSoft Mail Server WebMail feature (versions up to 1.8.1.5 and ea...

CVE-2002-0532

EMU Webmail contains a vulnerability (CVE-2002-0532) where a malicious dot-dot in the HTTP Host header can point to a Trojan horse configuration file with a pageroot specifier containing shell metacharacters, allowing local users to execute arbitrary programs. Root cause is improper Host header h...