CVE-2006-0637: Undefined Security Weakness

Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command with a long message literal argument, as demonstrated by Worldmail.pl. NOTE: this is a different vector and a different manipulation than CVE-2005-4267, so it...

Directory traversal

Multiple directory traversal vulnerabilities in 1 EPSTIMAP4S.EXE and 2 SPA-IMAP4S.EXE in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allow remote attackers to a list arbitrary directories or cause a denial of service via the LIST command; or create arbitrary files via the b APPEND,...

CVE-2006-0448: Undefined Security Weakness

Multiple directory traversal vulnerabilities in 1 EPSTIMAP4S.EXE and 2 SPA-IMAP4S.EXE in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allow remote attackers to a list arbitrary directories or cause a denial of service via the LIST command; or create arbitrary files via the b APPEND,...

CVE-2006-0449: Undefined Security Weakness

Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers to cause a denial of service infinite loop by sending an APPEND command and disconnecting before the expected amount of data is sent...

security flaw

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

security flaw

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

CVE-2005-4273

CVE-2005-4273 : IBM AIX 5.3 has multiple unspecified vulnerabilities in the getShell and getCommand components that allow local users to append to arbitrary files. Affected: AIX 5.3. No remediation details are provided in the connected documents; the CVSS score listed is 2.1 (Low) with local acce...

CVE-2005-4273: Undefined Security Weakness

Multiple unspecified vulnerabilities in 1 getShell and 2 getCommand in IBM AIX 5.3 allow local users to append to arbitrary files...

CVE-2005-3848

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

FreeBSD : Cyrus IMAPd -- APPEND command uses undefined programming construct (31952117-3d17-11d9-8818-008088034841)

To support MULTIAPPENDS the cmdappend handler uses the global stage array. This array is one of the things that gets destructed when the fatal function is triggered. When the Cyrus IMAP code adds new entries to this array this is done with the help of the postfix increment operator in combination...

CVE-2005-1089

Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files...

CVE-2005-1089: Undefined Security Weakness

Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files...

CVE-2005-1089

Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files...

CVE-2004-1100

Cross-site scripting XSS vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter...

CVE-2004-1100: Undefined Security Weakness

Cross-site scripting XSS vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter...

Cyrus IMAPd -- APPEND command uses undefined programming construct

To support MULTIAPPENDS the cmdappend handler uses the global stage array. This array is one of the things that gets destructed when the fatal function is triggered. When the Cyrus IMAP code adds new entries to this array this is done with the help of the postfix increment operator in combination...

TIPS MailPost append Parameter XSS

TIPS MailPost, a web application used for emailing HTML form data to a third party, is installed on the remote host. The version of MailPost hosted on the remote web server has a cross-site scripting vulnerability in the 'append' variable of mailpost.exe when debug mode is enabled. Debug mode is...

PT-2003-1865 · Ipswitch · Ws Ftp

Name of the Vulnerable Software and Affected Versions: WS FTP versions 3 and 4 Description: The issue allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via long arguments, specifically the APPE append or STAT status arguments. Recommendations: For ...

CVE-2000-0615

CVE-2000-0615 : LPRng 3.6.x improperly installs lpd as setuid root, allowing local users to append lpd trace and logging messages to files. The connected documents confirm the vulnerability is a local privilege issue tied to the lpd binary running with root privileges. No explicit exploit details...

CVE-2001-0996: Undefined Security Weakness

POP3Lite before 0.2.4 does not properly quote a . dot in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to...