CVE-2005-4568

Multiple format string vulnerabilities in FTGate Technology formerly known as Floosietek FTGate 4.4 aka Build 4.4.000 Oct 26 2005 allow remote attackers to execute arbitrary code via format string specifiers in the 1 USER, 2 PASS, and 3 TOP commands to the POP3 server; and the 4 LIST and 5...

muts_mailenable_imap_examine.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

[Full-disclosure] iDefense Security Advisory 12.20.05: Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability

Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability iDefense Security Advisory 12.20.05 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=359 December 20, 2005 I. BACKGROUND Qualcomm WorldMail is an email and messaging server designed for use in small...

CVE-2005-2923

CVE-2005-2923 affects Ipswitch’s IMail Server IMAP service (IP: Ipswitch Collaboration Suite). The vulnerability lies in the IMAP LIST command handling: when a long LIST argument (~8000 bytes) is processed, the server can reference invalid memory, leading to a crash (DoS). This requires authentic...

Ipswitch IMail Format String and 'LIST' Command DoS

Binary data 3317.prm...

security flaw

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

mailEnableDoS.txt

Synopsis: MailEnable Imap Remote DOS. Product: MailEnable Pro MailEnable Enterprise http://www.mailenable.com Version: Confirmed on MailEnable Pro 1.7 and MailEnable Enterprise 1.1 Author: Josh Zlatin-Amishav Date: November 24, 2005 Background: MailEnable's mail server software provides a powerfu...

iDEFENSE Security Advisory 2005-11-17.t

Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability iDEFENSE Security Advisory 11.17.05 www.idefense.com/application/poi/display?id=341&type=vulnerabilities November 17, 2005 I. BACKGROUND Qualcomm WorldMail is an email and messaging server designed for use in small to large...

MailEnable < 1.7 IMAP Server Multiple Vulnerabilities (ME-100008)

The remote host is running MailEnable, a commercial mail server for Windows. The IMAP server bundled with the version of MailEnable Professional or Enterprise Edition installed on the remote host is prone to a stack-based buffer overflow when handling an overly-long mailbox name in certain...

CVE-2005-3189

Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email messages via ".." sequences in the SELECT command...

CVE-2005-3189

Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email messages via ".." sequences in the SELECT command...

WorldMail IMAP Server Traversal Arbitrary Mail Spool Access

The remote host is running Eudora WorldMail, a commercial mail server for Windows. The IMAP server bundled with the version of WorldMail installed on the remote host fails to filter directory traversal sequences from mailbox names and fails to restrict access to mailboxes within its spool area. A...

FTGate mail server buffer overflow

IMAP server oversized EXAMINE command buffer overflow...

WorldMail IMAP Server Directory Traversal Arbitrary Spool Access

Binary data 3299.prm...

Buffer Overrun in FTGate4 Groupware Mail server

/ Package: FTGate4 Groupware Mail server Auth: http://www.floosietek.com/ Versions: 4.1 / previous versions may also be vulnerable Vulnerability Type: Remote Code Execution / Disclaimer: --------- The information is provided "as is" without warranty of any kind. The author of this issue shall not...

MDaemon imap server DoS

The remote host is running the MDaemon IMAP server. It is possible to crash the remote version of this softare sending a long argument to the 'LOGIN' command. This problem allows an attacker to make the remote service crash, thus preventing legitimate users from receiving e-mails. OpenVAS...

BasiliX Arbitrary File Disclosure Vulnerability

The remote web server contains a PHP script that is prone to information disclosure. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions allow retrieval of arbitrary files that are accessible to the web server user when sending a message since they...

MDaemon imap server DoS(2)

The remote host is running the MDaemon IMAP server. It is possible to crash the remote version of this software by by sending a too long argument to the 'SELECT' or 'EXAMINE' commands. This problem allows an attacker to make the remote service crash, thus preventing legitimate users from receivin...

IMAP UW mail server buffer overflow

Buffer overflow on oversized quoted string in mailbox name...

CVE-2005-2661

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...