CVE-2009-1255

The processstat function in 1 Memcached before 1.2.8 and 2 MemcacheDB 1.2.0 discloses a the contents of /proc/self/maps in response to a stats maps command and b memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such ...

Mercur Mailserver/Messaging <= 5.0 IMAP Overflow Vulnerability

The Mercur IMAP4 Service running on the host is vulnerable to buffer overflows by sending a special crafted SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

CVE-2008-1255

The CVE-2008-1255 entry concerns the ZyXEL P-660HW series router. The vulnerability arises because the device maintains authentication state by source IP, allowing a remote attacker to bypass authentication by initiating a session from the IP address of a previously authenticated user. This affec...

Debian Security Advisory DSA 1255-1 (libgtop2)

The remote host is missing an update to libgtop2 announced via advisory DSA 1255-1. Liu Qishuai discovered that the GNOME gtop library performs insufficient sanitising when parsing the system's /proc table, which may lead to the execution of arbitrary code. OpenVAS Vulnerability Test $Id:...

CVE-2007-1255

CVE-2007-1255 affects Connectix Boards 0.7 and earlier. An unrestricted file upload vulnerability in admin.bbcode.php allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF image with a .php extension via the uploadimage parameter to admin.php, which c...

Debian DSA-1255-1 : libgtop2 - buffer overflow

Liu Qishuai discovered that the GNOME gtop library performs insufficient sanitising when parsing the system's /proc table, which may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Mercur v5.0 IMAP SP3 SELECT Buffer Overflow

Mercur v5.0 IMAP server is prone to a remotely exploitable stack-based buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to a fixed size memory buffer. Credit to Tim Taylor for discover the vulnerabilit...

Mercur Messaging 2005 IMAP Login Buffer Overflow

This module exploits a stack buffer overflow in Atrium Mercur IMAP 5.0 SP3. Since the room for shellcode is small, using the reverse ordinal payloads yields the best results. This module requires Metasploit: https://metasploit.com/download Current source:...

MERCUR Messaging IMAP LOGIN command buffer overflow

Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...

MERCUR Messaging IMAP LOGIN command buffer overflow

Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...

Immunity Canvas: VSPLOIT_MERCURIMAP

Name| vsploitmercurimap ---|--- CVE| CVE-2006-1255 Exploit Pack| CANVAS Description| Mercur Imap 5.0 Remote Buffer Overflow Notes| CVE Name: CVE-2006-1255 VENDOR: Mercur Repeatability: One time Date public: 03/16/2006 CVE Url: https://vulners.com/cve/CVE-2006-1255 CVSS: 10.0...

CVE-2006-1255

CVE-2006-1255 affects Mercur Messaging / Mercur Mailserver's IMAP service (versions up to and including 5.0 SP3). The vulnerability is a stack-based buffer overflow in the IMAP command handler (LOGIN and SELECT) caused by insufficient bounds checking when copying user-supplied data, allowing remo...

IMail IMAP LOGIN special character vulnerability

Added: 01/04/2006 CVE: CVE-2005-1255 BID: 13727 OSVDB: 16804 Background IMail is a mail server for Windows platforms. It includes SMTP, POP, IMAP, and LDAP services, a web interface, and web calendaring. Problem A remote attacker could execute arbitrary commands by sending a long specially crafte...

CVE-2003-1255

addbookmark.php in Active PHP Bookmarks APB 1.1.01 allows remote attackers to add arbitrary bookmarks as other users using a modified authuserid parameter...

Immunity Canvas: ZEN

Name| zen ---|--- CVE| CVE-2005-1255 Exploit Pack| CANVAS Description| imailimap Notes| CVE Name: CVE-2005-1255 VENDOR: IPSwitch VersionsAffected: IMail 8.13 Repeatability: This is a one shot exploit. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1255 CVSS: 10.0...

CVE-2005-1255

CVE-2005-1255 refers to multiple stack-based buffer overflows in the IMail IMAP server (Ipswitch Collaboration Suite and related IMail Server versions). The vulnerability allows a remote attacker to cause arbitrary code execution by sending a crafted LOGIN command with an overly long username arg...

Immunity Canvas: IMAIL_IMAP

Name| imailimap ---|--- CVE| CVE-2005-1255 Exploit Pack| CANVAS Description| IMAIL Imap Notes| CVE Name: CVE-2005-1255 VENDOR: IPSwitch URL: http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities VersionsAffected: IMail 8.13 up to 8.2p1 Repeatability: This is a one shot...

iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LOGIN Remote Buffer Overflow Vulnerabilities

Ipswitch IMail IMAP LOGIN Remote Buffer Overflow Vulnerabilities iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=243&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solution for...

CVE-2004-1255

CVE-2004-1255 involves a buffer overflow in the expandtabs function in 2fax 3.04, enabling remote code execution via a text file converted to TIFF. The vulnerability affects 2fax 3.04 and is exploitable over the network with low attack complexity and no authentication required, potentially yieldi...

CVE-2001-1255

CVE-2001-1255 affects WinMySQLadmin 1.1, where the MySQL password is stored in plain text in the my.ini file. This allows local users to obtain unauthorized access to the MySQL database. The available sources describe the root cause as plaintext storage of credentials in a configuration file, ena...