Floosietek Ftgate vulnerabilities

CVE-2005-3640 [CRITICAL] CWE-119 CVE-2005-3640: Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.

CVE-1999-0887 [MEDIUM] CVE-1999-0887: FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack. FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.

CVE-2005-4568 [HIGH] CVE-2005-4568: Multiple format string vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4. Multiple format string vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allow remote attackers to execute arbitrary code via format string specifiers in the (1) USER, (2) PASS, and (3) TOP commands to the POP3 server; and the (4) LIST and (5) AUTHENTICATE commands to the IMAP server.

CVE-2005-4569 [HIGH] CVE-2005-4569: Stack-based buffer overflow in index.fts in FTGate Technology (formerly known as Floosietek) FTGate Stack-based buffer overflow in index.fts in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allows remote attackers to execute arbitrary code via a long tzoffset value.

CVE-2005-4567 [MEDIUM] CVE-2005-4567: Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosiet Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (Build 4.4.000 Oct 26 2005) allow remote attackers to inject arbitrary web script or HTML by sending (1) the href parameter to index.fts, or the param1 parameter to (2) /domains/index.fts, (3) /config/licence.fts, or (4) /config/systemacl.fts.