Mercury IMAP Server <= 4.52 SEARCH Command Buffer Overflow

Binary data 4220.prm...

mercury-overflow.txt

Z:\ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found & Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void ph4nt0m.org S: pst06 OK LOGIN completed. C: pst06...

Mercury IMAP Server SEARCH Command Remote Buffer Overflow

The remote host is running the Mercury Mail Transport System, a free suite of server products for Windows and NetWare associated with Pegasus Mail. The remote installation of Mercury Mail includes an IMAP server that is affected by a buffer overflow vulnerability. Using a specially- crafted SEARC...

Ipswitch IMail Server IMAP SEARCH Command Date String Stack Overflow (CVE-2007-3925)

...

Code injection

Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an "invalid/corrupted" MIME body, which triggers a crash when the recipient listens to voicemail...

CVE-2007-4521

Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an "invalid/corrupted" MIME body, which triggers a crash when the recipient listens to voicemail...

CVE-2007-4521

Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an "invalid/corrupted" MIME body, which triggers a crash when the recipient listens to voicemail...

CVE-2007-4521

Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an "invalid/corrupted" MIME body, which triggers a crash when the recipient listens to voicemail...

CVE-2007-4521

Summary (CVE-2007-4521) : Asterisk Open Source versions 1.4.5–1.4.11 are vulnerable when configured to use an IMAP voicemail storage backend. Receiving an email with an invalid/corrupted MIME body can cause Asterisk to crash while a recipient listens to voicemail, leading to a denial of service. ...

AST-2007-021: Crash from invalid/corrupted MIME bodies when using voicemail with IMAP storage

Asterisk Project Security Advisory - AST-2007-021 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Crash from invalid/corrupted MIME bodies when | | | using...

SurgeMail IMAP Server SEARCH Command Remote Buffer Overflow

According to its banner, the remote host is running a version of the SurgeMail Mail Server older than 3.8k2 / 3.8m. Such versions are reportedly affected by a buffer overflow flaw in its IMAP service that can be triggered using a specially crafted 'SEARCH' command. An authenticated attacker can...

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007 Mercury/32 v4.52 is a security patch release, addressing a serious weakness in the MercuryS SMTP server specifically, a buffer overflow vulnerability in the way the server processes the AUTH command. All v4.x versions of Mercury earlier than v4.51...

[SECURITY] Fedora Core 6 Update: dovecot-1.0.3-6.fc6

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...

CVE-2007-4377

Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372...

Stack overflow

Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372...

CVE-2007-4377

CVE-2007-4377 describes a stack-based buffer overflow in the IMAP service of SurgeMail 38k. An authenticated remote attacker can overflow by sending a long argument to the IMAP SEARCH command, potentially leading to arbitrary code execution. Some sources note affected versions older than 3.8k2/3....

CVE-2007-4377

Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372...

SurgeMail 38k (SEARCH) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================== SurgeMail 38k SEARCH Remote Buffer Overflow Exploit ===================================================== !/usr/bin/python import os import sys import time import socket import struct th...

SURGEMAIL.py.txt

!/usr/bin/python import os import sys import time import socket import struct this is imap exploit 710 bytes, tcp port 9999 bind, borrowed from skape miller inventor of megacanvas sc = "\x90" sc += "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\xeb\x03\x59" sc +=...

Surgemail 38k - 'Search' Remote Buffer Overflow

!/usr/bin/python import os import sys import time import socket import struct this is imap exploit 710 bytes, tcp port 9999 bind, borrowed from skape miller inventor of megacanvas sc = "\x90" sc += "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\xeb\x03\x59" sc +=...