635 matches found
[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 215-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23th, 2002 http://www.debian.org/security/faq -...
Cyrus IMAP Server login Command Remote Overflow
According to its banner, the remote Cyrus IMAP server is vulnerable to a pre-login buffer overrun. An attacker without a valid login could exploit this, and would be able to execute arbitrary commands as the owner of the Cyrus process. This would allow full access to all users' mailboxes. This...
Cyrus Sieve / libSieve buffer overflow
problem ------- Cyrus' Sieve implementation contains a couple of classic string based buffer overflows in script parsing code. Anyone who can execute Sieve scripts can exploit these bugs. Versions up to libSieve 2.1.2 and Cyrus IMAP 2.1.10 are affected. Note that with Cyrus IMAP server exploiting...
pre-login buffer overflow in Cyrus IMAP server
problem ------- Cyrus IMAP server has a a remotely exploitable pre-login buffer overflow. I checked versions 1.4 oldest in web page and 2.1.10 which both had it, so apparently all versions are affected. Problem is that literal lengths aren't verified to be in any reasonable range. The length + 2 ...
Cyrus IMAP Server contains a buffer overflow vulnerability
Overview A buffer overflow vulnerability exists in versions of Cyrus IMAP Server up to and including 2.1.10. This vulnerability may allow a remote attacker to execute arbitrary code on the mail server with the privileges of the Cyrus IMAP Server. Description Cyrus IMAP Server is an e-mail...
CVE-2002-0146
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...
CVE-2002-0379
Buffer overflow in University of Washington imap server uw-imapd imap-2001 imapd 2001.315 and imap-2001a imapd 2001.315 with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request...
University of Washington imap Server (uw-imapd) BODY Request Remote Overflow
The remote version of UW-IMAP is vulnerable to a buffer overflow condition that could allow an authenticated attacker to execute arbitrary code on the remote host with the privileges of the IMAP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
CVE-2001-1009
Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...
CVE-2001-0473
Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands...
CVE-1999-1557
The IMail IMAP server (imapd) from Ipswitch is affected by a buffer overflow in the login functions for IMail 5.0 and earlier. An unauthenticated, remote attacker could trigger a denial of service and possibly execute arbitrary code by sending a long user name or a long password. Mitigation: upgr...
CVE-1999-1557
Buffer overflow in the login functions in IMAP server imapd in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a long user name or 2 a long password...
CVE-2001-0584
IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service hang via long 1 SELECT or 2 EXAMINE commands...
Pine / IMAP bug?
I am not sure if this is a known issue but here goes: By sending a small message by directly telnetting to port 25 and doing the following I was able to crash Pine: someone@somehost telnet some.mail.server 25 Trying xxx.xxx.xxx.xxx... Connected to some.mail.server. Escape character is '^'. 220...
CVE-2001-0584
MDaemon IMAP Server DoS (CVE-2001-0584): The Affected product is Alt-N Technologies MDaemon IMAP Server, version around 3.5.6. The vulnerability is triggered by sending too long arguments to the SELECT or EXAMINE commands, causing the server to crash (denial of service) for remote clients. Root c...
CVE-2001-0473
Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands...
MDaemon IMAP Denial Of Service
Advisory Name:MDaemon IMAP Denial Of Service Discovered:23rd Of March 2001 Application:Alt-N Technologies MDaemon 3.5.6 - Other versions most likely prior to this Platform:Windows 2k,95/98/NT - others unknown Severity:Denial of service from application Credit:[email protected] Vendor Status:Unkno...
Дырки в mutt (format string, GSSAPI)
Ошибки форматной строки при работе с сервером imap...
UoW imapd (UW-IMAP) Multiple Command Remote Overflows
The remote host appears to be running UoW IMAP Server. The installed version is affected by a buffer overflow vulnerability because the software fails to verify input length of arguments to the 'LIST', 'COPY', 'RENAME', 'FIND', 'LSUB' commands. An attacker, exploiting this flaw could execute...