Gordano Security Vulnerabilities

CVE-1999-0927

NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVE-2000-0859

The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.

CVE-2001-0585

Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request to port 8000 or port 9000.

CVE-2002-2408

Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server.