Ipswitch IMail服务器多个缓冲区溢出漏洞

BUGTRAQ ID: 24962 Ipswitch IMail Server是Ipswitch协作组件中捆绑的一个邮件服务器。 IMail捆绑了一个IMAP守护程序（imapd32.exe）允许用户访问邮件。如果向这个守护程序发送了Search或Search charset IMAP命令的话，就可以分别触发栈溢出和堆溢出漏洞，导致执行任意指令。 Ipswitch IMail 2006 Ipswitch Ipswitch Collaboration Suite 2006 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[SECURITY] Fedora 7 Update: nginx-0.5.28-1.fc7

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

iDefense Security Advisory 07.18.07: Ipswitch IMail Server 2006 IMAP Search Command Buffer Overflow Vulnerability

Ipswitch IMail Server 2006 Multiple IMAP Buffer Overflow Vulnerabilities iDefense Security Advisory 07.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 18, 2007 I. BACKGROUND Ipswitch Inc.'s IMail Server is an e-mail server aimed at providing easily configured and maintained e-mai...

Ipswitch IMail IMAP Daemon SUBSCRIBE Stack Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Ipswitch IMail and ICS server. Authentication is required to exploit this vulnerability. The specific flaw exists due to a lack of bounds checking during theparsing of arguments to the SUBSCRIBE IMAP...

Debian DSA-1325-1 : evolution - several vulnerabilities

Several remote vulnerabilities have been discovered in Evolution, a groupware suite with mail client and organizer. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1002 Ulf Harnhammar discovered that a format string vulnerability in the handling of...

GLSA-200707-03 : Evolution: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200707-03 Evolution: User-assisted remote execution of arbitrary code The imaprescan function of the file camel-imap-folder.c does not properly sanitize the 'SEQUENCE' response sent by an IMAP server before being used to index...

Evolution: User-assisted remote execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Camel is the Evolution Data Server module that handles mail functions. Description The imaprescan function of the file camel-imap-folder.c does not properly sanitize the "SEQUENCE" response sent by an IMAP server before bei...

[SECURITY] [DSA 1325-1] New evolution packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1325-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 29th, 2007 http://www.debian.org/security/faq -...

Fedora Core 6 : evolution-data-server-1.8.3-7.fc6 (2007-594)

This update fixes a security flaw in Evolution's IMAP module. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DSA-1321-1 : evolution-data-server - programming error

It was discovered that the IMAP code in the Evolution Data Server performs insufficient sanitising of a value later used an array index, which can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

evolution security update

CentOS Errata and Security Advisory CESA-2007:0510 Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server...

CentOS 3 / 4 : evolution (CESA-2007:0509)

Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A flaw w...

CentOS 5 : evolution-data-server (CESA-2007:0510)

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

RHEL 3 / 4 : evolution (RHSA-2007:0509)

Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A flaw w...

Mandrake Linux Security Advisory : evolution (MDKSA-2007:136)

A flaw in Evolution/evolution-data-server was found in how Evolution would process certain IMAP server messages. If a user were tricked into connecting to a malicious IMAP server, it was possible that arbitrary code could be executed with the privileges of the user using Evolution. Updated packag...

RHEL 5 : evolution-data-server (RHSA-2007:0510)

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

Important: evolution-data-server security update

1.8.0-15.0.4.el5 - Add patch for RH bug 244293 Camel IMAP security flaw...

evolution security update

CentOS Errata and Security Advisory CESA-2007:0509 Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of...

Important: Red Hat Security Advisory: evolution security update

Updated evolution packages that fix a security bug are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A flaw w...

evolution malicious server arbitrary code execution

Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...