CVE-2006-1017

The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the 1 safemode or 2 openbasedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imapopen function, allow remote attackers to obtain access to ...

ESA-2011-001: RSA, The Security Division of EMC, addresses RKM 1.5 C Client SQL Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-001: RSA, The Security Division of EMC, addresses RKM 1.5 C Client SQL Injection Vulnerability Security Advisory Updated January 13, 2011 Summary: The vulnerability that was identified in the RSA Key Manager RKM C client 1.5 which may expose...

CVE-2010-1904

RSA Key Manager (RKM) C Client 1.5.x is vulnerable to SQL injection via the metadata in encrypted data, allowing an attacker to manipulate the KeyTable/config caching data and potentially modify or delete encryption keys. The vulnerability arises from improper validation of metadata during key lo...

Gentoo Security Advisory GLSA 201001-03 (php)

The remote host is missing updates announced in advisory GLSA 201001-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201001-03 (php)

The remote host is missing updates announced in advisory GLSA 201001-03. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

PHP: Multiple vulnerabilities

Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers referenced below and the associated PHP release notes...

Gentoo Security Advisory GLSA 200911-03 (c-client uw-imap)

The remote host is missing updates announced in advisory GLSA 200911-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200911-03 (c-client uw-imap)

The remote host is missing updates announced in advisory GLSA 200911-03. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Mandrake Security Advisory MDVSA-2009:166 (c-client)

The remote host is missing an update to c-client announced via advisory MDVSA-2009:166. OpenVAS Vulnerability Test $Id: mdksa2009166.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:166 c-client Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Mandrake Security Advisory MDVSA-2009:166 (c-client)

The remote host is missing an update to c-client announced via advisory MDVSA-2009:166. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

FreeBSD : imap-uw -- University of Washington IMAP c-client Remote Format String Vulnerability (5ed2f96b-33b7-4863-8c6b-540d22344424)

SecurityFocus reports : University of Washington IMAP c-client is prone to a remote format-string vulnerability because the software fails to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2009-0671

CVE-2009-0671 is rejected/not used per the description; not an active vulnerability entry.

imap-uw -- University of Washington IMAP c-client Remote Format String Vulnerability

SecurityFocus reports: University of Washington IMAP c-client is prone to a remote format-string vulnerability because the software fails to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function...

DEBIAN-CVE-2008-5514

Off-by-one error in the rfc822outputchar function in the RFC822BUFFER routines in the University of Washington UW c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service crash via an e-mail message...

CVE-2008-5514

Off-by-one error in the rfc822outputchar function in the RFC822BUFFER routines in the University of Washington UW c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service crash via an e-mail message...

CVE-2008-5514

CVE-2008-5514 describes an off-by-one error in the RFC822BUFFER handling of the UW c-client library (used by the UW IMAP toolkit). The root cause is an off-by-one in the rfc822_output_char function, which can be triggered by a crafted email message to cause a crash (context-dependent denial of se...

CVE-2008-5514

Off-by-one error in the rfc822outputchar function in the RFC822BUFFER routines in the University of Washington UW c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service crash via an e-mail message...

UW-IMAP c-client库单字节溢出漏洞

BUGTRAQ ID: 32958 CVECAN ID: CVE-2008-5514 UW-IMAP是Linux和UNIX系统的免费IMAP服务，捆绑于各种Linux版本中。 UW-IMAP的c-client库中的rfc822outputchar函数没有检查缓冲区是否已经充满，因此可能多写入一个字节，之后由于大小为-1的memcpy操作会在rfc822outputdata中触发分段错误，导致服务程序崩溃。 University of Washington imap 2007e 厂商补丁： University of Washington ------------------------...

imap-uw -- imap c-client buffer overflow

SANS reports: The University of Washington IMAP library is a library implementing the IMAP mail protocol. University of Washington IMAP is exposed to a buffer overflow issue that occurs due to a boundary error within the rfc822outputchar function in the c-client library. The University of...

DEBIAN-CVE-2008-5006

smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service NULL pointer dereference and application crash by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code...