Lucene search
+L

6152 matches found

NVD
NVD
•added 2014/02/01 3:55 p.m.•28 views

CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS6.4AI score0.03235EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2014/02/01 3:55 p.m.•15 views

DEBIAN-CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS6.8AI score0.03235EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2014/02/01 3:55 p.m.•29 views

CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS6AI score0.03235EPSS
SaveExploits1References3
Prion
Prion
•added 2014/02/01 3:55 p.m.•16 views

Design/Logic Flaw

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS7AI score0.03235EPSS
SaveExploits1References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2014/02/01 3:55 p.m.•18 views

UBUNTU-CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS5.9AI score0.03235EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2014/02/01 3:00 p.m.•49 views

CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

6.3AI score0.03235EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2014/02/01 3:00 p.m.•69 views

CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS6.4AI score0.03235EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/01 12:00 a.m.•6 views

CVE-2013-7177: Improper Input Validation

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...

5CVSS6AI score0.03235EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2014/02/01 12:00 a.m.•8 views

PT-2014-3279

Name of the Vulnerable Software and Affected Versions Fail2ban versions prior to 0.8.11 Description The issue arises from a crafted e-mail address that matches an improperly designed regular expression in the cyrus-imap filter, allowing remote attackers to trigger the blocking of an arbitrary IP...

5CVSS0.03235EPSS
SaveExploits2References25
CERT
CERT
•added 2014/01/28 12:00 a.m.•33 views

Fail2ban postfix and cyrus-imap filters contain denial-of-service vulnerabilities

Overview Fail2ban versions prior to 0.8.11 are susceptible to a denial-of-service attack when a maliciously crafted email address is parsed by the postfix or cyrus-imap filters. If users have not deployed either of these filters then they are not affected. Description Fail2ban versions prior to...

5CVSS6.2AI score0.03235EPSS
SaveExploits2References3
Kitploit
Kitploit
•added 2014/01/20 11:23 p.m.•66 views

[Password Sniffer Spy v2.0] Tool to Sniff and Capture HTTP/FTP/POP3/SMTP/IMAP Passwords

Password Sniffer Spy is the all-in-one Password Sniffing Tool to capture Email, Web and FTP login passwords passing through the network. It automatically detects the login packets on network for various protocols and instantly decodes the passwords. Here is the list of supported protocols, HTTP...

7.2AI score
SaveExploits0
Cisco
Cisco
•added 2014/01/10 9:21 p.m.•61 views

Cisco Unity Connection Internet Message Access Protocol Denial of Service Vulnerability

A vulnerability in the Internet Message Access Protocol IMAP function of Cisco Unity Connection could allow an authenticated, remote attacker to cause 100 percent CPU utilization on the Cisco Unity Connection server, which may cause a denial of service DoS condition. The vulnerability is due to t...

6.8CVSS6.5AI score0.02835EPSS
SaveExploits0References1
NVD
NVD
•added 2014/01/10 4:47 p.m.•32 views

CVE-2014-0664

The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service CPU consumption via unspecified IMAP commands, aka Bug ID CSCul49976...

6.8CVSS6.3AI score0.02835EPSS
SaveExploits0References6
Prion
Prion
•added 2014/01/10 4:47 p.m.•34 views

Code injection

The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service CPU consumption via unspecified IMAP commands, aka Bug ID CSCul49976...

6.8CVSS6.7AI score0.02835EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2014/01/10 4:00 p.m.•45 views

CVE-2014-0664

The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service CPU consumption via unspecified IMAP commands, aka Bug ID CSCul49976...

6.2AI score0.02835EPSS
SaveExploits0References6
CVE
CVE
•added 2014/01/10 4:00 p.m.•79 views

CVE-2014-0664

CVE-2014-0664 affects Cisco Unity Connection. The issue is an IMAP DoS where an authenticated, remote attacker can cause 100% CPU by issuing specific IMAP commands due to how IMAP commands are processed. Cisco’s advisory states the vulnerability can be mitigated by applying the provided software ...

6.8CVSS6.4AI score0.02835EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/10 12:00 a.m.•10 views

CVE-2014-0664: Undefined Security Weakness

The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service CPU consumption via unspecified IMAP commands, aka Bug ID CSCul49976...

6.8CVSS5.8AI score0.02835EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/01/10 12:00 a.m.•9 views

PT-2014-3759

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection affected versions not specified Description The issue allows remote authenticated users to cause a denial of service, specifically CPU consumption, through unspecified IMAP commands. Recommendations At the moment, there ...

6.8CVSS0.02835EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2014/01/08 7:00 a.m.•45 views

[THC-Hydra v7.6] Fast Parallel Network Logon Cracker

Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...

7.5AI score
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2013/12/26 12:00 a.m.•20 views

UBUNTU-CVE-2013-1752

Rejected reason: Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service memory consumption via a long string, related to 1 httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; 2 ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; 3 imaplib - not y...

6.9AI score
SaveExploits1References6
Rows per page
Query Builder