50 matches found
[SECURITY] [DSA 902-1] New xmail packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 902-1 [email protected] http://www.debian.org/security/ Martin Schulze November 21st, 2005 http://www.debian.org/security/faq -...
DSA-902-1 xmail - buffer overflow
Bulletin has no description...
XMail 1.21 (-t Command Line Option) Local Root Buffer Overflow Exploit
No description provided by source. / XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include stdio.h include stdlib.h include unistd.h include string.h include signal.h include sys/types.h include sys/wait.h include sys/select.h defi...
XMail 1.21 - '-t' Command Line Option Local Buffer Overflow / Local Privilege Escalation
/ XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include include include include include include include include define TARGET "/var/MailRoot/bin/sendmail" define NM "nm" define GREP "grep" define MKDIR "mkdir" define TMP "/tmp"...
XMail 1.21 (-t Command Line Option) Local Root Buffer Overflow Exploit
Exploit for linux platform in category local exploits ====================================================================== XMail 1.21 -t Command Line Option Local Root Buffer Overflow Exploit ====================================================================== / XMail 1.21 'sendmail' local...
XMail 1.21 - -t Command Line Option Local Buffer Overflow Local Privilege Escalation
XMail 1.21 - -t Command Line Option Local Buffer Overflow Local Privilege Escalation / XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include include include include include include include include define TARGET...
XMail < 1.22.0 Multiple Overflows
Binary data 3257.prm...
CVE-2005-2943
Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option...
CVE-2005-2943
Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option...
CVE-2005-2943
CVE-2005-2943 describes a stack-based buffer overflow in xmail’s sendmail component prior to version 1.22, which could allow an attacker to execute arbitrary code via the -t option. Public advisories (Debian DSA-902-1, Gentoo GLSA 200512-05, SUSE SUSECVE) note a fix in xmail 1.21/1.22 series and ...
CVE-2005-2943
Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option...
XMail sendmail buffer overflow
Buffer overflow on message headers parsing in sendmail -t...
[Full-disclosure] iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability
Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.13.05 www.idefense.com/application/poi/display?id=321&type=vulnerabilities October 13, 2005 I. BACKGROUND XMail is an Internet and intranet mail server. XMail sources compile under GNU/Linux,...
PHPXMAIL - Authentication Bypass
Author: Stefan Lochbihler Date: 6. Juli 2005 Affected Software: PHPXMAIL Software Version: 0.7 - 1.1 Software URL: http://phpxmail.sourceforge.net/ Attack: Authentication Bypass Overview: PhpXmail is a web based management software for the Xmail mail server written in php. It's main usage is as a...
XMail < 0.59 APOP Overflow DoS
Binary data 1800.prm...
XMail < 2.4 (Build 0530) APOP Remote Format String
Binary data 1801.prm...
CVE-2001-0192
Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions...
CVE-2001-0192
Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions...
CVE-2001-0192
CVE-2001-0192 describes a buffer overflow in CTRLServer (XMail) that can be triggered via the cfgfileget or domaindel functions, allowing arbitrary command execution. The vulnerability is categorized with a NETWORK attack vector and HIGH impact (complete confidentiality, integrity, and availabili...