Eudora WorldMail IMAP LIST command buffer overflow

Added: 12/30/2005 CVE: CVE-2005-4267 BID: 15980 OSVDB: 22097 Background Eudora WorldMail is an e-mail server for Windows. Problem A long IMAP command ending with a close brace character could result in a buffer overflow, leading to remote command execution. Resolution Upgrade to a version of Eudo...

Eudora WorldMail IMAP LIST command buffer overflow

Added: 12/30/2005 CVE: CVE-2005-4267 BID: 15980 OSVDB: 22097 Background Eudora WorldMail is an e-mail server for Windows. Problem A long IMAP command ending with a close brace character could result in a buffer overflow, leading to remote command execution. Resolution Upgrade to a version of Eudo...

CVE-2005-4568

Multiple format string vulnerabilities in FTGate Technology formerly known as Floosietek FTGate 4.4 aka Build 4.4.000 Oct 26 2005 allow remote attackers to execute arbitrary code via format string specifiers in the 1 USER, 2 PASS, and 3 TOP commands to the POP3 server; and the 4 LIST and 5...

CVE-2005-4568

Multiple format string vulnerabilities in FTGate Technology formerly known as Floosietek FTGate 4.4 aka Build 4.4.000 Oct 26 2005 allow remote attackers to execute arbitrary code via format string specifiers in the 1 USER, 2 PASS, and 3 TOP commands to the POP3 server; and the 4 LIST and 5...

muts_mailenable_imap_examine.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

CVE-2005-4267

Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "" character, as demonstrated using long 1 LIST, 2 LSUB, 3 SEARCH TEXT, 4 STATUS INBOX, 5 AUTHENTICATE, 6 FETCH, 7 SELECT, and 8 COPY commands...

CVE-2005-4267

CVE-2005-4267 is a stack-based buffer overflow in the Qualcomm WorldMail IMAP Server 3.0. An unauthenticated remote attacker can trigger arbitrary code execution by sending crafted IMAP commands that end with a ‘}’, notably LIST/LSUB/SEARCH/STATUS/SELECT/etc. Affected builds are reported as 6.1.1...

FTGate <= 4.4.002 Multiple Remote Vulnerabilities (OF, FS, XSS)

The remote host appears to be running a version of FTGate, a commercial groupware mail server for Windows from FTGate Technology Ltd. The web server used to administer FTGate on the remote host fails to sanitize input to the 'href' parameter of the 'index.fts' script before using it to generate...

CVE-2005-4402

Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated users to execute arbitrary code via a long IMAP EXAMINE command...

CVE-2005-4402

CVE-2005-4402 describes a buffer overflow in MailEnable Professional (1.71 and earlier) and MailEnable Enterprise (1.1 and earlier). The root cause is a buffer overflow triggered by a long IMAP EXAMINE command, allowing remote authenticated users to potentially execute arbitrary code. The availab...

Qualcomm WorldMail IMAP mail server buffer overflow

Buffer overflows in multiple IMAP commands...

Multipe FTGate mail server vulnerabilities

Format string vulnerabilities in IMAP and POP3, HTTP server buffer overflow and crossite scripting...

[Full-disclosure] iDefense Security Advisory 12.20.05: Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability

Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability iDefense Security Advisory 12.20.05 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=359 December 20, 2005 I. BACKGROUND Qualcomm WorldMail is an email and messaging server designed for use in small...

[Full-disclosure] [ACSSEC-2005-11-27-0x2] Remote Overflows in Mailenable Enterprise 1.1 / Professional 1.7

Re: See-Security Research and Development "A remote buffer overflow exists in MailEnable Enterprise 1.1 IMAP EXAMINE command, which allows for post authentication code execution. This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch." -- There's a reason why the...

MailEnable IMAP EXAMINE Command Remote Overflow

The remote host is running a version of MailEnable's IMAP service that is prone to a buffer overflow attack when processing a EXAMINE command with a long mailbox name. Once authenticated, an attacker can exploit this flaw to execute arbitrary code subject to the privileges of the affected...

Qualcomm WorldMail Multiple IMAP Command Remote Overflow

The remote host is running a version of Qualcomm WorldMail's IMAP service that is prone to a buffer overflow attack triggered when processing a long command with a closing brace. An attacker can exploit this flaw to execute arbitrary code subject to the privileges of the affected application. C...

httpd cross-site scripting flaw in mod_imap

Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...

Ipswitch IMail Server IMAP LIST Command Remote Overflow DoS

The remote host is running Ipswitch Collaboration Suite or IMail Server, commercial messaging and collaboration suites for Windows. The version of Ipswitch Collaboration Suite / IMail server installed on the remote host contains an IMAP server that suffers from a denial of service flaw. Using a...

MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow

!/usr/bin/python Remote Mailenable Enterprise 1.1 EXAMINE buffer Overflow Discovered and exploited by [email protected] This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch. Details: SEH gets overwritten at 965 968 in VMWare bytes in the EXAMINE command. Filteri...

Novell NetMail IMAP Agent Long Verb Arguments Remote Overflow

The remote host is running Novell NetMail, a messaging and calendaring system for Windows, Linux, Unix, and NetWare. The IMAP agent installed on the remote host as part of Novell NetMail is affected by a stack-based buffer overflow due to its improper handling of long arguments to selected IMAP...