MDaemon DoS

Сервер разрешает только одно соединение, которое не отключается по таймауту. Кроме того, имеется переполнение буфера в IMAP...

CVE-2002-0997

Buffer overflows in IMAP Agent imapd for Novell NetMail NIMS 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service...

CVE-2002-0997

CVE-2002-0997 affects Novell NetMail (NIMS) IMAP Agent (imapd) 3.0.3 and earlier. The issue is a buffer overflow that allows remote attackers to cause a denial of service. The available records describe the vulnerable component and impact but do not specify a patch version or remediation steps. N...

CVE-2002-0997

Buffer overflows in IMAP Agent imapd for Novell NetMail NIMS 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service...

CVE-2000-0087

CVE-2000-0087 affects Netscape Communicator’s Mail Notification (nsnotify) utility. The issue arises from using IMAP without SSL even when the user configures SSL for Communicator, enabling a remote attacker to sniff usernames and passwords in plaintext. The description documents the vulnerable c...

CVE-2002-0146

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...

CVE-2000-0087

Netscape Mail Notification nsnotify utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext...

CVE-2002-0379

Buffer overflow in University of Washington imap server uw-imapd imap-2001 imapd 2001.315 and imap-2001a imapd 2001.315 with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request...

WU-IMAP 2000.287(1-2) - Remote Overflow

WU-IMAP 2000.2871-2 - Remote Overflow / 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to thir...

WU-IMAP 2000.287(1-2) Remote Exploit

Exploit for linux platform in category remote exploits ==================================== WU-IMAP 2000.2871-2 Remote Exploit ==================================== / 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source...

WU-IMAP 2000.287(1-2) - Remote Overflow

/ 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties, copied or duplicated in any...

SECURITY.NNOV: Courier CPU exhaustion + bonus on imap-uw

Imap-uw allows user to access any file he could access locally. It's not a bug it's insecurity by design. According to vendor's web FAQ it's not pointed in FAQ inside program distribution: -=-=-=-=-=-=- 5.1 I see that the IMAP server allows access to arbitary files on the system, including...

File system access in imap-uw

By design it's possible to access any file readable by user's account...

University of Washington imap Server (uw-imapd) BODY Request Remote Overflow

The remote version of UW-IMAP is vulnerable to a buffer overflow condition that could allow an authenticated attacker to execute arbitrary code on the remote host with the privileges of the IMAP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Buffer overflow in imap-uw

BODY command with oversized argument causes buffer overflow...

wu-imap buffer overflow condition

10.05.2002 SECURITY BUG REPORT Affected version: WU-IMAP 2000.283 default install WU-IMAP 2000.284 default install WU-IMAP 2000.287 default install WU-IMAP 2001.315 compiled with RFC 1730 support Overview: Wu-imapd is an easy to set-up IMAP daemon created and distributed by Washington University...

CVE-2001-1154

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service hang using PHP IMAP clients...

CVE-2001-1154

CVE-2001-1154 affects Cyrus mail servers (versions 2.0.15, 2.0.16, and 1.6.24) running on BSDi 4.2 with IMAP enabled. The issue allows remote attackers to cause a denial-of-service condition (hang) by leveraging PHP IMAP clients. The available documents confirm the affected software stack and the...

CVE-2001-1009

CVE-2001-1009 affects fetchmail (fetchmail-ssl) prior to 5.8.17. Multiple OpenVAS/DSA/Nessus entries describe a memory corruption in the IMAP and POP3 code where unverified input and missing bounds checking can allow a remote attacker—by controlling the server the client connects to—to cause writ...

CVE-2001-1009

Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...