MailEnable IMAP多个远程栈溢出漏洞

MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable的IMAP服务（MEIMAPS.EXE）在处理传送给EXAMINE和SELECT命令的参数时存在栈溢出漏洞，远程攻击者可以通过发送超长的参数来触发这个漏洞，导致执行任意指令。 此外，MEIMAPS.EXE在处理传送给DELETE命令的参数时也存在栈溢出漏洞，远程攻击者可以通过发送包含有“”或“?”字符的超长参数来触发这个漏洞，导致执行任意指令。 MailEnable MailEnable Professional Edition 2.32 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[ISecAuditors Security Advisories] IMAP/SMTP Injection in Hastymail

============================================= INTERNET SECURITY AUDITORS ALERT 2006-011 - Original release date: September 28, 2006 - Last revised: December 1, 2006 - Discovered by: Vicente Aguilera Diaz - Severity: 3/5 ============================================= I. VULNERABILITY...

Preemptive Protection against MailEnable IMAP Service Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in MailEnable IMAP service. MailEnable is an email server suite for Microsoft Windows. Several IMAP servers contain buffer overflow errors in the way they handle IMAP commands. By carefully crafting an overly long SELECT/EXAMINE command, an attacker can...

MailEnable IMAP Server Unspecified Buffer Overflow (ME-10018)

The IMAP server bundled with the version of MailEnable installed on the remote host is affected by an unspecified denial of service and potential buffer overflow vulnerability. A remote attacker may be able to exploit this issue to crash the affected service or to execute arbitrary code with LOCA...

MailEnable IMAP Server Multiple Buffer Overflow Vulnerabilities (ME-10021)

The IMAP server bundled with the version of MailEnable installed on the remote host reportedly fails to handle malicious arguments to the 'EXAMINE', 'SELECT', and 'DELETE' commands. An authenticated, remote attacker may be able to exploit these issues to crash the affected service or to execute...

MailEnable IMAP SELECT buffer overflow

Added: 12/01/2006 CVE: CVE-2006-6290 BID: 21362 OSVDB: 31698 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow vulnerability in the IMAP servic...

Secunia Research: MailEnable IMAP Service Two Vulnerabilities

====================================================================== Secunia Research 30/11/2006 - MailEnable IMAP Service Two Vulnerabilities - ====================================================================== Table of Contents Affected...

MailEnable IMAP SELECT buffer overflow

Added: 12/01/2006 CVE: CVE-2006-6290 BID: 21362 OSVDB: 31698 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow vulnerability in the IMAP servic...

MailEnable IMAP SELECT buffer overflow

Added: 12/01/2006 CVE: CVE-2006-6290 BID: 21362 OSVDB: 31698 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow vulnerability in the IMAP servic...

MailEnable IMAP SELECT buffer overflow

Added: 12/01/2006 CVE: CVE-2006-6290 BID: 21362 OSVDB: 31698 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow vulnerability in the IMAP servic...

USN-387-1: Dovecot vulnerability

Dovecot was discovered to have an error when handling its index cache files. This error could be exploited by authenticated POP and IMAP users to cause a crash of the Dovecot server, or possibly to execute arbitrary code. Only servers using the non-default option "mmapdisable=yes" were vulnerable...

MailEnable IMAP服务未明缓冲区溢出漏洞

MailEnable是一款流行的邮件服务程序. MailEnable IMAP服务存在未明缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 MailEnable MailEnable Professional 2.0-2.32 MailEnable MailEnable Professional 1.9-1.82 MailEnable MailEnable Enterprise Edition 2.0-2.32 MailEnable MailEnable Enterprise Edition 1.1-1.30 补丁下载：...

MailEnable IMAP服务远程缓冲区溢出漏洞

MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable在处理用户请求时存在漏洞，远程攻击者可以通过发送特制命令触发MailEnable的IMAP服务中的溢出漏洞，导致拒绝服务或执行任意代码。 MailEnable MailEnable Professional 2.0-2.32 MailEnable MailEnable Professional 1.9-1.82 MailEnable MailEnable Enterprise Edition 2.0-2.32 MailEnable MailEnable Enterprise Edition 1.1-1.3...

CVE-2006-5973

Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmapdisable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service crash via unspecified vectors involving the cache file...

CVE-2006-5973

CVE-2006-5973: Off-by-one buffer overflow in Dovecot 1.0test53–1.0.rc14 (and possibly other versions) when index files are used and mmap_disable=yes. This allows remote authenticated IMAP/POP3 users to crash the Dovecot server via vectors involving the cache file. Connected advisories (e.g., Ubun...

Dovecot IMAP/POP3 server off-by-one buffer overflow

No description provided...

ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability

ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-036.html October 31, 2006 -- CVE ID: CVE-2006-5478 -- Affected Vendor: Novell -- Affected Products: Netmail 3.5.2 Novell eDirectory 8.8.1 -- TippingPointTM IPS Customer...

Hastymail IMAP/SMTP远程命令注入漏洞

Hastymail是一个用PHP编写的快速、安全、兼容RFC、跨平台的IMAP/SMTP客户端应用程序。 Hastymail在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 拥有有效Hastymail帐号的用户可以通过在Hastymail变量中嵌入“命令结束”序列直接向IMAP或SMTP服务器发送命令。这允许远程攻击者绕过安全限制，尝试攻击IMAP或SMTP服务。 Hastymail Hastymail 1.5 Hastymail Hastymail 1.0.2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Novell Netmail User Authentication Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netmail. Exploitation does not require authentication. The specific flaw exists within the user authentication component of Novell Netmail. The routine responsible for authenticating Netmail...

CVE-2006-5478

Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via 1 a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors...