[SECURITY] Fedora Core 6 Update: dovecot-1.0.3-6.fc6

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...

IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow

IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow !/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:\perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMa...

IPSwitch IMAIL IMAP server buffer overflow

Buffer overflow in SEARCH and SUBSCRIBE commands and also during authentication procedure...

GLSA-200707-03 : Evolution: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200707-03 Evolution: User-assisted remote execution of arbitrary code The imaprescan function of the file camel-imap-folder.c does not properly sanitize the 'SEQUENCE' response sent by an IMAP server before being used to index...

Evolution: User-assisted remote execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Camel is the Evolution Data Server module that handles mail functions. Description The imaprescan function of the file camel-imap-folder.c does not properly sanitize the "SEQUENCE" response sent by an IMAP server before bei...

evolution security update

CentOS Errata and Security Advisory CESA-2007:0510 Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server...

CentOS 5 : evolution-data-server (CESA-2007:0510)

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

Mandrake Linux Security Advisory : evolution (MDKSA-2007:136)

A flaw in Evolution/evolution-data-server was found in how Evolution would process certain IMAP server messages. If a user were tricked into connecting to a malicious IMAP server, it was possible that arbitrary code could be executed with the privileges of the user using Evolution. Updated packag...

RHEL 5 : evolution-data-server (RHSA-2007:0510)

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

Important: Red Hat Security Advisory: evolution-data-server security update

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

Evolution Data Server integer overflow

Integer overflow in Camel mailer component on negative value of IMAP server SEQUENCE command reply...

CVE-2007-3166

CVE-2007-3166 describes a buffer overflow in Qualcomm Eudora 7.1.0.9 that allows a user-assisted, remote IMAP server to execute arbitrary code via a long FLAGS response to a SELECT INBOX command. The CVE is documented in NVD with a base score of 6.8 (Medium) and an attack vector of NETWORK with n...

IMAP SSL/TLS Server Detection

Binary data 3999.prm...

MERCUR Messaging IMAP Server NTLM Authentication NTLMSSP Argument Remote Overflow

The remote host is running MERCUR Messaging, a commercial mail server for Windows. The IMAP server component of MERCUR Messaging is affected by a buffer overflow vulnerability involving its support for NTLM authentication. An unauthenticated, remote attacker can leverage this issue to crash the...

Courier-IMAP: Remote execution of arbitrary code

Background Courier-IMAP is an IMAP server which is part of the Courier mail system. It provides access only to maildirs. Description CJ Kucera has discovered that some Courier-IMAP scripts don't properly handle the XMAILDIR variable, allowing for shell command injection. Impact A remote attacker...

IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow (CVE-2007-1675)

...

IBM Lotus Domino Server 6.5 (username) Remote Denial of Service Exploit

No description provided by source. !/usr/bin/python Remote DOS exploit code for IBM Lotus Domino Server 6.5. Tested on windows 2000 server SP4. The code crashes the IMAP server. Since this is a simple DOS where 256+ but no more than 270 bytes for the username crashes the service...

CVE-2007-1675

Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server nimap.exe in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username...

Buffer overflow

Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server nimap.exe in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username...

CVE-2007-1675

Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server nimap.exe in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username...