CVE-2006-2502

Stack-based buffer overflow in pop3d in Cyrus IMAPD cyrus-imapd 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command...

CVE-2006-2502

Stack-based buffer overflow in pop3d in Cyrus IMAPD cyrus-imapd 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command...

Stack overflow

Stack-based buffer overflow in pop3d in Cyrus IMAPD cyrus-imapd 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command...

CVE-2006-2502

CVE-2006-2502 : The Cyrus IMAPD (cyrus-imapd) 2.3.2 server is vulnerable to a stack-based buffer overflow in pop3d when the popsubfolders option is enabled. A crafted long USER command allows remote attackers to potentially execute arbitrary code. Public references include NVD entry and multiple ...

CVE-2006-2502

Stack-based buffer overflow in pop3d in Cyrus IMAPD cyrus-imapd 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command...

Cyrus IMAPD < 2.3.4 'POP3D USER' Command Remote Overflow

Binary data 3628.prm...

Cyrus IMAPD POP3 server buffer overflow

Buffer overflow on oversized username if popsubfolders options is enabled in imapd.conf...

[Full-disclosure] Cyrus IMAPD pop3d remote compromise aka cyrusFUCK3d

Shouts to blackzero, alex, wY!, revoguard, bogus, wtfomg and all those yankees LOVE TO LISA :- genuine advisory by kcope/zeroday discovered by kcope!!! kingcopeatgmx.net public disclosure 21. May 2006 vendor was not notified mail quota exceeded???? fuck it let's get to business...

Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ======================================================== Cyrus IMAPD 2.3.2 pop3d Remote Buffer Overflow Exploit ======================================================== / zeroday warez !!! PRIVATE - DONT DISTRIBUTE - PRIVATE !!! cyruspop3d.c ...

Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (1)

/ zeroday warez !!! PRIVATE - DONT DISTRIBUTE - PRIVATE !!! cyruspop3d.c - cyrus pop3d remote exploit by kcope tested on cyrus-imapd-2.3.2,linux bug found 23 Apr 2006 by kcope -------------------------------------------- imapd/pop3d.c line 1830 : char userbufMAXMAILBOXNAME+1, p; ... if !ulen ulen...

Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit

No description provided by source. / zeroday warez !!! PRIVATE - DONT DISTRIBUTE - PRIVATE !!! cyruspop3d.c - cyrus pop3d remote exploit by kcope tested on cyrus-imapd-2.3.2,linux bug found 23 Apr 2006 by kcope -------------------------------------------- imapd/pop3d.c line 1830 : char...

Ubuntu 4.10 : cyrus21-imapd vulnerability (USN-37-1)

Recently another buffer overflow has been discovered in the SASL authentication module of the Cyrus IMAP server. An off-by-one comparison error in the mysaslcanonuser function could lead to a missing termination of an user name string. This vulnerability could allow remote, attacker-supplied...

FreeBSD : Cyrus IMAPd -- IMAPMAGICPLUS preauthentification overflow (816fdd8b-3d14-11d9-8818-008088034841)

When the option imapmagicplus is activated on a server the PROXY and LOGIN commands suffer a standard stack overflow, because the username is not checked against a maximum length when it is copied into a temporary stack buffer. This bug is especially dangerous because it can be triggered before a...

FreeBSD : Cyrus IMAPd -- APPEND command uses undefined programming construct (31952117-3d17-11d9-8818-008088034841)

To support MULTIAPPENDS the cmdappend handler uses the global stage array. This array is one of the things that gets destructed when the fatal function is triggered. When the Cyrus IMAP code adds new entries to this array this is done with the help of the postfix increment operator in combination...

FreeBSD : Cyrus IMAPd -- FETCH command out of bounds memory corruption (c0a269d5-3d16-11d9-8818-008088034841)

The argument parser of the fetch command suffers a bug very similiar to the partial command problem. Arguments like 'bodyp', 'binaryp' or 'binaryp' will be wrongly detected and the bufferposition can point outside of the allocated buffer for the rest of the parsing process. When the parser trigge...

FreeBSD : cyrus-imapd -- multiple buffer overflow vulnerabilities (b2d248ad-88f6-11d9-aa18-0001020eed82)

The Cyrus IMAP Server ChangeLog states : - Fix possible single byte overflow in mailbox handling code. - Fix possible single byte overflows in the imapd annotate extension. - Fix stack-based buffer overflows in fetchnews exploitable by peer news server, backend exploitable by admin, and in imapd...

FreeBSD : Cyrus IMAPd -- PARTIAL command out of bounds memory corruption (114d70f3-3d16-11d9-8818-008088034841)

Due to a bug within the argument parser of the partial command an argument like 'bodyp' will be wrongly detected as 'body.peek'. Because of this the bufferposition gets increased by 10 instead of 5 and could therefore point outside the allocated memory buffer for the rest of the parsing process. ...

cyrus, perl security update

CentOS Errata and Security Advisory CESA-2005:408 Updated cyrus-imapd packages that fix several buffer overflow security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-imapd package contains the core of the...

security flaw

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via 1 an off-by-one error in the imapd annotate extension, 2 an off-by-one error in "cached header handling," 3 a stack-based buffer overflow in fetchnews, or 4 a stack-based buffer overflow in...

Moderate: Red Hat Security Advisory: cyrus-imapd security update

Updated cyrus-imapd packages that fix several buffer overflow security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-imapd package contains the core of the Cyrus IMAP server. Several buffer overflow bugs we...