CVE-2002-1580

CVE-2002-1580 affects Cyrus IMAP server (versions 1.4 and 2.1.10) due to an integer/buffer overflow in imapparse.c. A large length value can trigger a pre-authentication buffer overflow, potentially allowing remote code execution. Related OpenVAS/Nessus entries describe pre-login heap/buffer over...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

Cyrus IMSPd multiple vulnerabilities

The Cyrus team reported multiple vulnerabilities in older versions of Cyrus IMSPd: These releases correct a recently discovered buffer overflow vulnerability, as well as clean up a significant amount of buffer handling throughout the code...

Cyrus IMSPD v1.7 abook_dbname Remote Root Exploit

Exploit for linux platform in category remote exploits ================================================= Cyrus IMSPD v1.7 abookdbname Remote Root Exploit ================================================= / Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner...

Cyrus IMSPD 1.7 - abook_dbname Remote Code Execution

Cyrus IMSPD 1.7 - abookdbname Remote Code Execution / Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner Exploit coded by: SpikE Exploitation techinique: As said by Felix Lindner, the bug lies in the "abookdbname" function. To cause the overrun, we must ca...

Cyrus IMSPD 1.7 - 'abook_dbname' Remote Code Execution

/ Cyrus IMSPD Remote Root Exploit ------------------------------- Bug found by: Felix Lindner Exploit coded by: SpikE Exploitation techinique: As said by Felix Lindner, the bug lies in the "abookdbname" function. To cause the overrun, we must call this function with a long "name" variable. It can...

Cyrus IMSP remote root vulnerability

n.runs GmbH http://www.nruns.com/ [email protected] n.runs-SA-2003.001 15-Dec-2003 Vendor: Andrew Systems Group, Carnegie Mellon cmu.edu Product: Cyrus IMSP Vulnerability: Buffer overflow in address book handling Affected Releases: 1.4, 1.5a6, 1.6a3, 1.7 NOT Affected Releases: - Severty: HIGH CE...

Cyrus IMSP buffer overflow

Buffer overflow in multiple commands...

Cyrus IMSP Daemon 1.x - Remote Buffer Overflow

Cyrus IMSP Daemon 1.x - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/9227/info A problem has been identified in the Cyrus IMSP Daemon implementation when handling certain types of requests. Because of this, it may be possible for a remote attacker to gain unauthorized acces...

Cyrus IMSP Daemon 1.x - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/9227/info A problem has been identified in the Cyrus IMSP Daemon implementation when handling certain types of requests. Because of this, it may be possible for a remote attacker to gain unauthorized access to a system using the vulnerable software. /...

CVE-2002-2253

Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via 1 a long header name, 2 a long IMAP flag, or 3 a script that generates a large number of errors that overflow the resulting error string...

CVE-2002-2043

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password...

[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 215-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 215-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23th, 2002 http://www.debian.org/security/faq -...

DSA-215 cyrus-imapd - buffer overflow

Bulletin has no description...

Cyrus IMAP Server login Command Remote Overflow

According to its banner, the remote Cyrus IMAP server is vulnerable to a pre-login buffer overrun. An attacker without a valid login could exploit this, and would be able to execute arbitrary commands as the owner of the Cyrus process. This would allow full access to all users' mailboxes. This...

CVE-2002-1347

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 long inputs during user name canonicalization, 2 characters that need to be escaped during LDAP authentication using saslauthd, or 3 an...

CVE-2002-1347

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 long inputs during user name canonicalization, 2 characters that need to be escaped during LDAP authentication using saslauthd, or 3 an...

DEBIAN-CVE-2002-1347

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 long inputs during user name canonicalization, 2 characters that need to be escaped during LDAP authentication using saslauthd, or 3 an...