4988 matches found
CVE-2006-0853
CVE-2006-0853 describes a buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4. The vulnerability allows remote authenticated users to crash the IMAP server and potentially execute arbitrary code via a long SEARCH argument. The Nessus entry corroborates that a...
squirrelmail -- multiple vulnerabilities
Multiple vulnerabilities has been discovered since 1.4.5, including IMAP injection as well as some XSS issues...
TrueNorth IA eMailserver IMAP server buffer overflow
Buffer overflow in oversized SEARCH command...
[AJECT] TrueNorth IA eMailserver 5.3.4 buffer overflow vulnerability
---------------------------------------- Synopsis ---------------------------------------- TrueNorth IA eMailserver 5.3.4 is prone to a remote buffer overflow vulnerability in the IMAP server. Product: Internet Anywhere eMailserver Corporate Edition Version: 5.3.4 and probably the older versions...
SquirrelMail < 1.4.6 Multiple Vulnerabilities
The installed version of SquirrelMail fails to sanitize user-supplied input to mailbox names before passing them to an IMAP server. An unauthenticated attacker may be able to leverage this issue to launch attacks against the underlying IMAP server or against a user's mailboxes by tricking him int...
IA eMailServer IMAP SEARCH Command Remote Overflow
The remote host is running IA eMailServer, a commercial messaging system for Windows. The IMAP server bundled with the version of IA eMailServer installed on the remote host crashes when it receives a SEARCH command argument of 560 or more characters. An authenticated attacker could exploit this...
SquirrelMail < 1.4.7 Multiple Vulnerabilities
Binary data 3441.prm...
Directory traversal
Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remote authenticated users to read e-mails of other users or create, modify, or delete directories via a .. dot dot in the argument to the 1 CREATE, 2 SELECT, 3 DELETE, or 4 RENAME...
CVE-2006-0798
CVE-2006-0798 : Multiple directory traversal vulnerabilities in the IMAP service of Macallan Mail Solution (before 4.8.05.004) allow remote authenticated users to read emails of other users or create/modify/delete directories by sending crafted arguments to CREATE, SELECT, DELETE, or RENAME. The ...
[SA18775] Macallan Mail Solution IMAP Commands Directory Traversal
TITLE: Macallan Mail Solution IMAP Commands Directory Traversal SECUNIA ADVISORY ID: SA18775 VERIFY ADVISORY: http://secunia.com/advisories/18775/ CRITICAL: Moderately critical IMPACT: Security Bypass, Exposure of sensitive information WHERE: From remote SOFTWARE: Macallan Mail Solution 4.x...
Macallan Mail Solution directory traversal
Directory traversal in IMAP server...
Macallan IMAP Server Multiple Traversals Arbitrary File/Directory Manipulation
The remote host is running Macallan Mail Solution, a mail server for Windows. The IMAP server bundled with the version of Macallan installed on the remote host fails to filter directory traversal sequences from mailbox names passed to the 'CREATE', 'DELETE, 'RENAME', and 'SELECT' commands. An...
CVE-2006-0730
Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service application crash or hang via unspecified vectors involving 1 "potential hangs" in the APPEND command and "potential crashes" in 2 dovecot-auth and 3 imap/pop3-login. NOTE: vector 2...
eudora_imap.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Buffer overflow
Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command with a long message literal argument, as demonstrated by Worldmail.pl. NOTE: this is a different vector and a different manipulation than CVE-2005-4267, so it...
CVE-2006-0637
Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command with a long message literal argument, as demonstrated by Worldmail.pl. NOTE: this is a different vector and a different manipulation than CVE-2005-4267, so it...
CVE-2006-0637
CVE-2006-0637: Buffer overflow in cram.dll of QUALCOMM Eudora WorldMail 3.0 enables remote code execution via an IMAP APPEND command with a long message literal argument. The issue affects WorldMail 3.0 and is noted as a different vector from CVE-2005-4267, suggesting a distinct vulnerability pat...
CVE-2006-0637
Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command with a long message literal argument, as demonstrated by Worldmail.pl. NOTE: this is a different vector and a different manipulation than CVE-2005-4267, so it...
MailEnable IMAP Server EXAMINE Command Remote DoS
The remote host is running MailEnable, a commercial mail server for Windows. According to the version number in its banner, the IMAP server bundled with the installation of MailEnable Professional on the remote host may crash when handling certain EXAMINE commands. An authenticated attacker may b...