640 matches found
mutt mail agent buffer overflow
Buffer overflow on parsing IMAP server reply...
GLSA-200606-27 : Mutt: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200606-27 Mutt: Buffer overflow TAKAHASHI Tamotsu has discovered that Mutt contains a boundary error in the 'browsegetnamespace' function in browse.c, which can be triggered when receiving an overly long namespace from an IMAP...
Mutt: Buffer overflow
Background Mutt is a small but very powerful text-based mail client. Description TAKAHASHI Tamotsu has discovered that Mutt contains a boundary error in the "browsegetnamespace" function in browse.c, which can be triggered when receiving an overly long namespace from an IMAP server. Impact A...
Multiple eserv IMAP mail server and web server vulnerabilities
IMAP server directory traversal, HTTP scripts source code disclosure...
Alt-N MDaemon 2-8 - IMAP Remote Buffer Overflow
source: https://www.securityfocus.com/bid/18129/info Alt-N MDaemon IMAP Server is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This iss...
security flaw
Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...
GLSA-200603-09 : SquirrelMail: XSS and IMAP command injection
The remote host is affected by the vulnerability described in GLSA-200603-09 SquirrelMail: XSS and IMAP command injection SquirrelMail does not validate the rightframe parameter in webmail.php, possibly allowing frame replacement or cross-site scripting CVE-2006-0188. Martijn Brinkers and Scott...
Ipswitch Multiple Products < 2006.03 IMAP FETCH Command Overflow
Binary data 3473.prm...
Kerio MailServer IMAP Server Crafted LOGIN Command DoS
The remote host is running Kerio MailServer, a commercial mail server available for Windows, Linux, and Mac OS X platforms. The installed version of Kerio MailServer terminates abnormally when it receives certain malformed IMAP LOGIN commands. An unauthenticated, remote attacker can exploit this...
Ipswitch IMail Server/Collaboration Suite IMAP FETCH Command Overflow
The remote host is running Ipswitch Collaboration Suite / IMail Secure Server / IMail Server, commercial messaging and collaboration suites for Windows. According to its banner, the version of Ipswitch Collaboration Suite / IMail Secure Server / IMail Server installed on the remote host has a...
IMAP Proxy: Format string vulnerabilities
Background IMAP Proxy also known as up-imapproxy proxies IMAP transactions between an IMAP client and an IMAP server. Description Steve Kemp discovered two format string errors in IMAP Proxy. Impact A remote attacker could design a malicious IMAP server and entice someone to connect to it using...
CVE-2006-0929
CVE-2006-0929 affects the IMAP server of ArGoSoft Mail Server Pro 1.8.8.1. The issue is a directory traversal in the IMAP RENAME command where mailbox names are not filtered for "..", allowing an authenticated remote attacker to create/move folders arbitrarily on the affected system. The connecte...
CVE-2006-0929
Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. dot dot in the RENAME command...
Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String
Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String source: https://www.securityfocus.com/bid/16854/info Alt-N MDaemon IMAP Server is affected by a remote format-string vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in the...
Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String
source: https://www.securityfocus.com/bid/16854/info Alt-N MDaemon IMAP Server is affected by a remote format-string vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in the format-specifier argument to a formatted printing...
[AJECT] TrueNorth IA eMailserver 5.3.4 buffer overflow vulnerability
---------------------------------------- Synopsis ---------------------------------------- TrueNorth IA eMailserver 5.3.4 is prone to a remote buffer overflow vulnerability in the IMAP server. Product: Internet Anywhere eMailserver Corporate Edition Version: 5.3.4 and probably the older versions...
SquirrelMail < 1.4.6 Multiple Vulnerabilities
The installed version of SquirrelMail fails to sanitize user-supplied input to mailbox names before passing them to an IMAP server. An unauthenticated attacker may be able to leverage this issue to launch attacks against the underlying IMAP server or against a user's mailboxes by tricking him int...
SquirrelMail < 1.4.7 Multiple Vulnerabilities
Binary data 3441.prm...
Macallan Mail Solution directory traversal
Directory traversal in IMAP server...
Macallan IMAP Server Multiple Traversals Arbitrary File/Directory Manipulation
The remote host is running Macallan Mail Solution, a mail server for Windows. The IMAP server bundled with the version of Macallan installed on the remote host fails to filter directory traversal sequences from mailbox names passed to the 'CREATE', 'DELETE, 'RENAME', and 'SELECT' commands. An...