Ipswitch IMail Server Imailsec.dll Heap Buffer Overflow (CVE-2007-2795)

Ipswitch IMail server is a messaging service suite that supports numerous Internet standard electronic mail exchanging protocols. The IMail IMAP server is a server-side implementation of the IMAP protocol. There exists a heap overflow vulnerability in Ipswitch IMail Server IMAP component. The...

GNU Mailutils imap4d SEARCH Format String (CVE-2005-2878)

The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. T...

GNU Mailutils imap4d Format String (CVE-2005-1523)

The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. T...

The use of injection techniques to attack the mail server and defenses(a)-vulnerability warning-the black bar safety net

This article will detail through the talk to mail server communication of a Web application, i.e., the webmail application to inject some mail protocolsIMAP and SMTP Protocolcommands to attack a mail server of the principles, methods and defenses. A Webmail application role Webmail app through IM...

Preemptive Protection against Mercury Mail IMAP Buffer Overflow Vulnerability

Multiple buffer overflow vulnerabilities exist in Mercury Mail Transport System. Mercury Mail Transport System is a free mail server program that supports various email access and exchange protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing...

MERCUR imapd SUBSCRIBE command buffer overflow

Added: 03/27/2007 CVE: CVE-2007-1579 BID: 23050 OSVDB: 33546 Background MERCUR Messaging Server is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability allows remote, authenticated attackers to execute arbitrary commands by...

SquirrelMail: Cross-site scripting and IMAP command injection

Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP protocols. Description SquirrelMail does not validate the rightframe parameter in webmail.php, possibly allowing frame replacement or cross-site scripting CVE-2006-0188. Martijn Brinkers and Scott Hughes...

imap security update

CentOS Errata and Security Advisory CESA-2005:850 An updated imap package that fixes a buffer overflow issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The imap package provides server daemons for both the IMAP Internet...

FTGate4 Groupware Mail Server 4.1 (imapd) Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "143", ; unless $remote...

FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow (PoC)

FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow PoC !/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host,...

Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail server v.4.2 (SP2) - IMAP protocol

STATUS, EXAMINE, DELETE, SUBSCRIBE, UNSUBSCRIBE, RENAME, LIST, LSUB, LOGIN, CREATE, SELECT Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail server v.4.2 SP2 http://www.atriumsoftwareusa.com/ Discovered by Dennis Rand www.Infowarfare.dk...

Mutt Controlled IMAP server buffer overflow

Advisory ID Internal CORE-20030304-02 Bugtraq ID: 7120 CVE Name: CAN-2003-0140 Title: Mutt Controlled IMAP server buffer overflow Class: Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: No Vendors notified: . Core Notification: 2003-03-11 . Notification...