exploits , vulnerabilities , articles , Merak Mail Server and Webmail Email Message HTML Injection Vulnerability

Title	Merak Mail Server and Webmail Email Message HTML Injection Vulnerability
Published	2008-12-22-12:00AM
Updated	2008-12-29-04:42PM
Class	Input Validation Error
CVE	CVE-2008-5734
Remote	Yes
Local	No
Credit	Nenad Vijatov
Vulnerable	IceWarp Web Mail 5.6.1 IceWarp Web Mail 5.6.1 IceWarp Web Mail 5.6 IceWarp Web Mail 5.6 IceWarp Web Mail 5.5.1 IceWarp Web Mail 5.4 IceWarp Web Mail 5.3.2 IceWarp Web Mail 5.3.1 IceWarp Web Mail 5.3 IceWarp Web Mail 5.2.8 IceWarp Web Mail 5.2.7 IceWarp Merak Mail Server 9.3.2 IceWarp Merak Mail Server 9.0 IceWarp Merak Mail Server 8.9.2 IceWarp Merak Mail Server 8.9.1
Not Vulnerable	IceWarp Merak Mail Server 9.4
Code	Attackers can exploit this issue by sending malicious emails to unsuspecting victims, and enticing the victims into opening the email.
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-07-03 Drupal Cross-Site Scripting, Code Injection and Information Disclosure Vulnerabilities
• 2009-07-03 phpMyAdmin SQL bookmark HTML Injection Vulnerability
• 2009-07-02 Zoph Cross-Site Scripting and SQL Injection Vulnerabilities
• 2009-07-02 Radware AppWall Source Code Information Disclosure Vulnerability
• 2009-07-02 Joomla! Cross Site Scripting and Information Disclosure Vulnerabilities
• 2009-06-30 fuzzylime (cms) Multiple Local File Include Vulnerabilities
• 2009-06-30 FireStats Unspecified SQL Injection Vulnerability
• 2009-06-30 Pidgin OSCAR Protocol Web Message Denial of Service Vulnerability
• 2009-06-29 Mozilla Thunderbird/Seamonkey Multipart Alternative Message Memory Corruption Vulnerability
• 2009-06-29 Sun Solaris Event Port API Multiple Local Denial of Service Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sat, 04 Jul 2009 22:02:42 +0000