Skip to content
Threat Feed
Subscribe

Tag

Smtp

2 briefs RSS
critical advisory

Tabs Mail Carrier 2.5.1 MAIL FROM Buffer Overflow Vulnerability

Tabs Mail Carrier 2.5.1 is vulnerable to a buffer overflow in the MAIL FROM SMTP command, allowing remote attackers to execute arbitrary code by sending a crafted MAIL FROM parameter with an oversized buffer to overwrite the EIP register and execute a bind shell payload via port 25.

cve-2019-25646 buffer-overflow smtp code-execution
2r 1t
high advisory

Maddy Mail Server LDAP Filter Injection Vulnerability

Maddy Mail Server is vulnerable to LDAP injection via unsanitized username in the `auth.ldap` module, enabling identity spoofing, LDAP directory enumeration, and attribute value extraction by injecting arbitrary LDAP filter expressions through the username field in SMTP submission or IMAP LOGIN interfaces.

Maddy Mail Server ldap-injection authentication-bypass information-disclosure maddy smtp imap
2r 3t