ability server vulnerabilities and exploits

(subscribe to this query)

Unspecified vulnerability in Code-Crafters Ability Mail Server prior to 2.70 allows remote malicious users to cause a denial of service (daemon crash) via an IMAP4 FETCH command.

Code-crafters Ability Mail Server Code-crafters Ability Mail Server 1.18 Code-crafters Ability Mail Server 2.01b Code-crafters Ability Mail Server 2.02b Code-crafters Ability Mail Server 2.03b Code-crafters Ability Mail Server 2.04b Code-crafters Ability Mail Server 2.05b Code-crafters Ability Mail Server 2.10 Code-crafters Ability Mail Server 2.11 Code-crafters Ability Mail Server 2.12 Code-crafters Ability Mail Server 2.13 Code-crafters Ability Mail Server 2.14

Ability Mail Server prior to 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.

Code-crafters Ability Mail Server 1.18 Code-crafters Ability Mail Server 2.01b Code-crafters Ability Mail Server 2.02b Code-crafters Ability Mail Server 2.03b Code-crafters Ability Mail Server 2.04b Code-crafters Ability Mail Server 2.05b Code-crafters Ability Mail Server 2.10 Code-crafters Ability Mail Server 2.11 Code-crafters Ability Mail Server 2.12 Code-crafters Ability Mail Server 2.13 Code-crafters Ability Mail Server 2.14 Code-crafters Ability Mail Server 2.15

Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote malicious users to execute arbitrary code via a long STOR command.

Code-crafters Ability Server 2.2.5 Code-crafters Ability Server 2.3.2 Code-crafters Ability Server 2.3.4

2 EDB exploits

Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote malicious users to execute arbitrary code via a long APPE command.

Code-crafters Ability Server 2.2.5 Code-crafters Ability Server 2.3.2 Code-crafters Ability Server 2.3.4

1 EDB exploit

A vulnerability has been found in Ability FTP Server 2.34 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component APPE Command Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit...

Codecrafters Ability Ftp Server

Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.

Codecrafters Ability Mail Server 3.3.2

1 EDB exploit

Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.

Codecrafters Ability Mail Server 4.2.6

The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote malicious users to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service.

Code-crafters Ability Mail Server 1.18

Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote malicious users to inject arbitrary web script or HTML via the body of an email.

Code-crafters Ability Mail Server 3.1.1

1 EDB exploit

In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations History server (or standalone S+ History server) and ultimately write values to the controlled process.

Abb Abb Ability™ Symphony® Plus Operations Abb Abb Ability™ Symphony® Plus Historian Abb Symphony + Historian 3.0 Abb Symphony + Historian 3.1 Abb Symphony + Operations 1.1 Abb Symphony + Operations 2.0 Abb Symphony + Operations 2.1 Abb Symphony + Operations 3.0 Abb Symphony + Operations 3.1 Abb Symphony + Operations 3.2 Abb Symphony + Operations 3.3

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook