50 matches found
XMail CTRLServer remote buffer overflow vulnerability
SUMMARY I discovered all versions of XMailhttp://www.mycio.com/davidel/xmail have buffer overflow vulnerabilities in CTRLServer.These holes is NOT same as APOP,USER command buffer overflow vulnerability discovered beforetime.And this problem allows a remote attacker to execute arbitrary code by...
Xmail 0.5/0.6 CTRLServer - Arbitrary Commands
// source: https://www.securityfocus.com/bid/2360/info Versions of CTRLServer are vulnerable to malicious user-supplied input. A failure to properly bounds-check data passed to the cfgfileget command leads to an overflow, which, properly exploited, can result in remote execution of malicious code...
Xmail 0.50.6 CTRLServer - Arbitrary Commands
Xmail 0.50.6 CTRLServer - Arbitrary Commands // source: https://www.securityfocus.com/bid/2360/info Versions of CTRLServer are vulnerable to malicious user-supplied input. A failure to properly bounds-check data passed to the cfgfileget command leads to an overflow, which, properly exploited, can...
XMail APOP / USER Command Remote Overflow
The remote host is running XMail, a POP3 server. The installed version is subject to a buffer overflow when it receives two arguments that are too long for the APOP command. An attacker could exploit this issue to disable the POP server or to execute arbitrary code as root on the remote host. C...
CVE-2000-0841
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command...
CVE-2000-0840
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command...
CVE-2000-0841
Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command...
CVE-2000-0841
XMail POP3 server is vulnerable to a buffer overflow in the APOP command when processing long inputs, affecting versions before 0.59. This can allow a remote attacker to execute arbitrary commands (with some sources noting potential root-level impact). The connected documents provide vulnerabilit...
CVE-2000-0840
XMail POP3 server (versions before 0.59) is vulnerable to a buffer overflow triggered by a long USER argument. The issue can allow an attacker to remotely execute commands on the affected host, with reports indicating possible code execution as root. The vulnerability is tied to the APOP/USER han...