XMail < 0.59 APOP Overflow DoS

Binary data 1800.prm...

XMail < 2.4 (Build 0530) APOP Remote Format String

Binary data 1801.prm...

CVE-2001-0192

Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions...

XMail CTRLServer remote buffer overflow vulnerability

SUMMARY I discovered all versions of XMailhttp://www.mycio.com/davidel/xmail have buffer overflow vulnerabilities in CTRLServer.These holes is NOT same as APOP,USER command buffer overflow vulnerability discovered beforetime.And this problem allows a remote attacker to execute arbitrary code by...

Xmail 0.5/0.6 CTRLServer - Arbitrary Commands

// source: https://www.securityfocus.com/bid/2360/info Versions of CTRLServer are vulnerable to malicious user-supplied input. A failure to properly bounds-check data passed to the cfgfileget command leads to an overflow, which, properly exploited, can result in remote execution of malicious code...