FreeBSD : Cyrus IMAPd -- FETCH command out of bounds memory corruption (c0a269d5-3d16-11d9-8818-008088034841)

The argument parser of the fetch command suffers a bug very similiar to the partial command problem. Arguments like 'bodyp', 'binaryp' or 'binaryp' will be wrongly detected and the bufferposition can point outside of the allocated buffer for the rest of the parsing process. When the parser trigge...

FreeBSD : Cyrus IMAPd -- APPEND command uses undefined programming construct (31952117-3d17-11d9-8818-008088034841)

To support MULTIAPPENDS the cmdappend handler uses the global stage array. This array is one of the things that gets destructed when the fatal function is triggered. When the Cyrus IMAP code adds new entries to this array this is done with the help of the postfix increment operator in combination...

FreeBSD : cyrus-sasl -- potential buffer overflow in DIGEST-MD5 plugin (0c592c4a-1bcc-11d9-a3ec-00061bd2d56f)

The Cyrus SASL DIGEST-MD5 plugin contains a potential buffer overflow when quoting is required in the output. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...

FreeBSD : Cyrus IMAPd -- PARTIAL command out of bounds memory corruption (114d70f3-3d16-11d9-8818-008088034841)

Due to a bug within the argument parser of the partial command an argument like 'bodyp' will be wrongly detected as 'body.peek'. Because of this the bufferposition gets increased by 10 instead of 5 and could therefore point outside the allocated memory buffer for the rest of the parsing process. ...

FreeBSD : Cyrus IMAPd -- IMAPMAGICPLUS preauthentification overflow (816fdd8b-3d14-11d9-8818-008088034841)

When the option imapmagicplus is activated on a server the PROXY and LOGIN commands suffer a standard stack overflow, because the username is not checked against a maximum length when it is copied into a temporary stack buffer. This bug is especially dangerous because it can be triggered before a...

cyrus, perl security update

CentOS Errata and Security Advisory CESA-2005:408 Updated cyrus-imapd packages that fix several buffer overflow security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-imapd package contains the core of the...

Moderate: Red Hat Security Advisory: cyrus-imapd security update

Updated cyrus-imapd packages that fix several buffer overflow security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-imapd package contains the core of the Cyrus IMAP server. Several buffer overflow bugs we...

security flaw

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via 1 an off-by-one error in the imapd annotate extension, 2 an off-by-one error in "cached header handling," 3 a stack-based buffer overflow in fetchnews, or 4 a stack-based buffer overflow in...

RHEL 4 : cyrus-imapd (RHSA-2005:408)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:408 advisory. The cyrus-imapd package contains the core of the Cyrus IMAP server. Several buffer overflow bugs were found in cyrus-imapd. It is possible that an...

CVE-2005-0546

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via 1 an off-by-one error in the imapd annotate extension, 2 an off-by-one error in "cached header handling," 3 a stack-based buffer overflow in fetchnews, or 4 a stack-based buffer overflow in...

CVE-2005-0546

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via 1 an off-by-one error in the imapd annotate extension, 2 an off-by-one error in "cached header handling," 3 a stack-based buffer overflow in fetchnews, or 4 a stack-based buffer overflow in...

CVE-2004-1089

CVE-2004-1089 affects Apple Mac OS X 10.3.6 Server when using Kerberos authentication with Cyrus IMAP. The vulnerability, as described in the initial document, allows local users to access mailboxes of other users, indicating an information disclosure / mailbox access issue arising from the Cyrus...

CVE-2004-1089

Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users...

Cyrus imapd 2.2.4 - 2.2.8 (imapmagicplus) Remote Exploit

Exploit for linux platform in category remote exploits ======================================================== Cyrus imapd 2.2.4 - 2.2.8 imapmagicplus Remote Exploit ======================================================== / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x /...

Cyrus imapd 2.2.4 2.2.8 - imapmagicplus Remote Overflow

Cyrus imapd 2.2.4 2.2.8 - imapmagicplus Remote Overflow / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x / unl0ck Bug found by Stefan Esser www.unl0ck.org / www.coredumped.info [email protected] / [email protected] Greets to: all GOTFault ex-member, unl0ck, scozar, eos-indi...

Cyrus imapd 2.2.4 - 2.2.8 (imapmagicplus) Remote Exploit

No description provided by source. / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x / unl0ck Bug found by Stefan Esser www.unl0ck.org / www.coredumped.info [email protected] / [email protected] Greets to: all GOTFault ex-member, unl0ck, scozar, eos-india, xesio and all my...

Cyrus imapd 2.2.4 < 2.2.8 - 'imapmagicplus' Remote Overflow

/ Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x / unl0ck Bug found by Stefan Esser www.unl0ck.org / www.coredumped.info [email protected] / [email protected] Greets to: all GOTFault ex-member, unl0ck, scozar, eos-india, xesio and all my other friends Thanks to: n2n Why: Th...

Mac OS X Multiple Vulnerabilities (Security Update 2005-003)

The remote host is missing Security Update 2005-003. This security update contains security fixes for the following applications : - AFP Server - Bluetooth Setup Assistant - Core Foundation - Cyrus IMAP - Cyrus SASL - Folder Permissions - Mailman - Safari These programs have multiple...

Mandrake Linux Security Advisory : cyrus-sasl (MDKSA-2005:054)

A buffer overflow was discovered in cyrus-sasl's digestmd5 code. This could lead to a remote attacker executing code in the context of the service using SASL authentication. This vulnerability was fixed upstream in version 2.1.19. The updated packages are patched to deal with this issue...

Mandrake Linux Security Advisory : cyrus-imapd (MDKSA-2005:051)

Several overruns have been fixed in the IMAP annote extension as well as in cached header handling which can be run by an authenticated user. As well, additional bounds checking in fetchnews was improved to avoid exploitation by a peer news admin. %NASLMINLEVEL 70300 C Tenable Network Security,...