FreeBSD : Cyrus IMAP pre-authentication heap overflow vulnerability (33)

The following package needs to be updated: cyrus %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg35f6fdf8a42511d89c6d0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

cyrus-sasl -- potential buffer overflow in DIGEST-MD5 plugin

The Cyrus SASL DIGEST-MD5 plugin contains a potential buffer overflow when quoting is required in the output...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

DEBIAN-CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

CVE-2002-1580

CVE-2002-1580 affects Cyrus IMAP server (versions 1.4 and 2.1.10) due to an integer/buffer overflow in imapparse.c. A large length value can trigger a pre-authentication buffer overflow, potentially allowing remote code execution. Related OpenVAS/Nessus entries describe pre-login heap/buffer over...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

Cyrus IMSPd multiple vulnerabilities

The Cyrus team reported multiple vulnerabilities in older versions of Cyrus IMSPd: These releases correct a recently discovered buffer overflow vulnerability, as well as clean up a significant amount of buffer handling throughout the code...

Cyrus IMSPD 1.7 - abook_dbname Remote Code Execution

Cyrus IMSPD 1.7 - abookdbname Remote Code Execution / Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner Exploit coded by: SpikE Exploitation techinique: As said by Felix Lindner, the bug lies in the "abookdbname" function. To cause the overrun, we must ca...

Cyrus IMSPD v1.7 abook_dbname Remote Root Exploit

Exploit for linux platform in category remote exploits ================================================= Cyrus IMSPD v1.7 abookdbname Remote Root Exploit ================================================= / Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner...

Cyrus IMSPD 1.7 - 'abook_dbname' Remote Code Execution

/ Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner Exploit coded by: SpikE Exploitation techinique: As said by Felix Lindner, the bug lies in the "abookdbname" function. To cause the overrun, we must call this function with a long "name" variable. It can...

Cyrus IMSP buffer overflow

Buffer overflow in multiple commands...

Cyrus IMSP remote root vulnerability

n.runs GmbH http://www.nruns.com/ [email protected] n.runs-SA-2003.001 15-Dec-2003 Vendor: Andrew Systems Group, Carnegie Mellon cmu.edu Product: Cyrus IMSP Vulnerability: Buffer overflow in address book handling Affected Releases: 1.4, 1.5a6, 1.6a3, 1.7 NOT Affected Releases: - Severty: HIGH CE...

Cyrus IMSP Daemon 1.x - Remote Buffer Overflow

Cyrus IMSP Daemon 1.x - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/9227/info A problem has been identified in the Cyrus IMSP Daemon implementation when handling certain types of requests. Because of this, it may be possible for a remote attacker to gain unauthorized acces...

Cyrus IMSP Daemon 1.x - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/9227/info A problem has been identified in the Cyrus IMSP Daemon implementation when handling certain types of requests. Because of this, it may be possible for a remote attacker to gain unauthorized access to a system using the vulnerable software. /...

CVE-2002-2253

Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via 1 a long header name, 2 a long IMAP flag, or 3 a script that generates a large number of errors that overflow the resulting error string...

CVE-2002-2043

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password...

[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 215-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 215-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23th, 2002 http://www.debian.org/security/faq -...