Cyrus IMAP Server: Multiple remote vulnerabilities

Background The Cyrus IMAP Server is an efficient, highly-scalable IMAP e-mail server. Description Multiple vulnerabilities have been discovered in the argument parsers of the 'partial' and 'fetch' commands of the Cyrus IMAP Server CAN-2004-1012, CAN-2004-1013. There are also buffer overflows in t...

GLSA-200411-34 : Cyrus IMAP Server: Multiple remote vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200411-34 Cyrus IMAP Server: Multiple remote vulnerabilities Multiple vulnerabilities have been discovered in the argument parsers of the 'partial' and 'fetch' commands of the Cyrus IMAP Server CAN-2004-1012, CAN-2004-1013. There...

Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Cyrus IMAP Server multiple remote vulnerabilities Release Date: 2004/11/22 Last Modified: 2004/11/22 Author: Stefan Esser [email protected] Application: Cyrus IMAP Server = 2.2.8...

Cyrus IMAP Server < 2.2.10 Multiple Remote Overflows

According to its banner, the remote Cyrus IMAPD server is vulnerable to one pre-authentication buffer overflow, as well as three post- authentication buffer overflows. A remote attacker could exploit these issues to crash the server, or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenab...

Debian DSA-215-1 : cyrus-imapd - buffer overflow

Timo Sirainen discovered a buffer overflow in the Cyrus IMAP server, which could be exploited by a remote attacker prior to logging in. A malicious user could craft a request to run commands on the server under the UID and GID of the cyrus server. %NASLMINLEVEL 70300 C Tenable Network Security,...

Cyrus IMAP Server login Command Remote Overflow

Binary data 1085.prm...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

CVE-2002-1580

CVE-2002-1580 affects Cyrus IMAP server (versions 1.4 and 2.1.10) due to an integer/buffer overflow in imapparse.c. A large length value can trigger a pre-authentication buffer overflow, potentially allowing remote code execution. Related OpenVAS/Nessus entries describe pre-login heap/buffer over...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 215-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23th, 2002 http://www.debian.org/security/faq -...

Cyrus IMAP Server login Command Remote Overflow

According to its banner, the remote Cyrus IMAP server is vulnerable to a pre-login buffer overrun. An attacker without a valid login could exploit this, and would be able to execute arbitrary commands as the owner of the Cyrus process. This would allow full access to all users' mailboxes. This...

pre-login buffer overflow in Cyrus IMAP server

problem ------- Cyrus IMAP server has a a remotely exploitable pre-login buffer overflow. I checked versions 1.4 oldest in web page and 2.1.10 which both had it, so apparently all versions are affected. Problem is that literal lengths aren't verified to be in any reasonable range. The length + 2 ...

Cyrus IMAP Server contains a buffer overflow vulnerability

Overview A buffer overflow vulnerability exists in versions of Cyrus IMAP Server up to and including 2.1.10. This vulnerability may allow a remote attacker to execute arbitrary code on the mail server with the privileges of the Cyrus IMAP Server. Description Cyrus IMAP Server is an e-mail...