CVE-2008-2859

NetWin SurgeMail IMAP service prior to 3.9g2 is affected by an unspecified vulnerability described as CVE-2008-2859 that allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an “imap command.” The NVD entry lists this as a MEDIUM-severity issue (CVSSv...

CVE-2008-2859

Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service daemon crash via unknown vectors related to an "imap command."...

Stack overflow

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command...

CVE-2008-1498

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command...

Stack overflow

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...

CVE-2008-1497

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...

CVE-2008-1498

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command...

CVE-2008-1497

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...

CVE-2008-1276

Multiple buffer overflows in the IMAP service MEIMAPS.EXE in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the 1 FETCH, 2 EXAMINE, and 3 UNSUBSCRIBE commands...

Null pointer dereference

The IMAP service MEIMAPS.exe in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service crash via 1 SEARCH and 2 APPEND commands without required arguments, which triggers a NULL pointer dereference...

CVE-2008-1276

Multiple buffer overflows in the IMAP service MEIMAPS.EXE in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the 1 FETCH, 2 EXAMINE, and 3 UNSUBSCRIBE commands...

MailEnable 3.13 - IMAP Service Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/28145/info MailEnable is prone to multiple remote vulnerabilities in the IMAP service, including: - Multiple buffer-overflow vulnerabilities. - Multiple denial-of-service vulnerabilities due to a NULL-pointer exception. An attacker may leverage these issu...

Authentication Capture: IMAP

This module provides a fake IMAP service that is designed to capture authentication credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Authentication Capture: IMAP', 'Description' = %...

Lotus Domino IMAP mailbox name buffer overflow

Added: 11/02/2007 CVE: CVE-2007-3510 BID: 26176 OSVDB: 40953 Background IBM Lotus Domino is a messaging and collaboration solution for multiple platforms. Problem A buffer overflow vulnerability in Lotus Domino could allow a remote, authenticated attacker to execute arbitrary commands by sending ...

CVE-2007-3510

Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authenticated users to execute arbitrary code via a long mailbox name...

CVE-2007-3510

IBM Lotus Domino IMAP Server is affected by a buffer overflow in the IMAP service prior to 6.5.6 FP2 and prior to 7.0.3 for 7.x. A remote authenticated user can exploit this via a long mailbox name to execute arbitrary code in the server context. Exploitation often requires valid IMAP credentials...

CVE-2007-3510

Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authenticated users to execute arbitrary code via a long mailbox name...

CVE-2003-1470

Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service crash and execute arbitrary code via a CREATE command with a long mailbox name...

IBM Lotus Domino IMAP Service Mailbox Name Overflow

The IMAP server component of IBM Lotus Domino Server installed on the remote host fails to properly validate the mailbox name before copying it into a fixed-size stack buffer as part of handling certain unspecified commands. Using a specially crafted mailbox name to which he is subscribed, an...

iDefense Security Advisory 10.23.07: IBM Lotus Domino IMAP Buffer Overflow Vulnerability

IBM Lotus Domino IMAP Buffer Overflow Vulnerability iDefense Security Advisory 10.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 23, 2007 I. BACKGROUND IBM Lotus Domino Server software provides messaging, calendaring and scheduling capabilities on a variety of operating systems...