Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (2)

source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash if...

Atrium Software Mercur Mail Server 3.2 - Multiple Buffer Overflows (1)

// source: https://www.securityfocus.com/bid/1051/info Atrium Software Mercur is a SMTP, POP3, and IMAP mail server. Insufficient boundary checking exists in the code that handles within the SMTP "mail from" command, the POP3 "user" command and the IMAP "login" command. The application will crash...

CVE-1999-0643

This CVE entry is rejected/not used per the Initial Description.

CVE-2000-0087

Netscape Mail Notification nsnotify utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext...

CVE-2000-0053

Microsoft Commercial Internet System MCIS IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request...

CVE-2000-0034

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."...

CVE-1999-0005

CVE-1999-0005 : An IMAP server buffer overflow in the AUTHENTICATE command allows arbitrary command execution. Multiple sources identify the issue as a remote overflow in UW-IMAP/UoW imapd, where sending a too-long AUTHENTICATE command could crash the server or enable code execution. The Red Hat/...

CVE-1999-0042

Buffer overflow in University of Washington's implementation of IMAP and POP servers...

CVE-1999-0005

Arbitrary command execution via IMAP buffer overflow in authenticate command...

CVE-1999-0042

CVE-1999-0042 describes a buffer overflow in University of Washington's IMAP and POP servers. The widely cited details come from multiple connected sources, including a Nessus plugin that specifies a remote buffer overflow in the IMAP server login() function which may allow a remote user to gain ...

imail.5.0.txt

Date: Mon, 1 Mar 1999 23:30:21 -0800 From: Marc To: [email protected] Subject: Multiple IMail Vulnerabilites eEye Digital Security Team www.eEye.com [email protected] March 1, 1999 Multiple IMail Vulnerabilites Systems Affected IMail 5.0 Release Date March 1, 1999 Advisory Code...

UoW imapd AUTHENTICATE Command Remote Overflow

It was possible to crash the remote IMAP server by sending a too long AUTHENTICATE command. An attacker may be able to exploit this vulnerability to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10292; scriptversion "1.31";...

IMAP pop-2d POP Daemon FOLD Command Remote Overflow

There is a buffer overflow in the imap suite provided with Debian GNU/Linux 2.1, which has a vulnerability in its POP-2 daemon, found in the ipopd package. This vulnerability allows an attacker to gain a shell as user 'nobody', but requires the attacker to have a valid pop2 account. C Tenable...

UoW IMAP/POP server_login() Function Remote Overflow

A remote buffer overflow in this IMAP server may allow a remote user to gain root privileges. University of Washington IMAP server is known to be affected. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10125; scriptversion "1.32"; scriptcveid"CVE-1999-0042";...

IMail IMAP Server Login Functions Remote Overflow

The remote host is running IMail IMAP server. The installed version is affected by a buffer overflow when handling a long user name, or a long password. An attacker, exploiting this flaw, could cause a denial of service, or possibly execute arbitrary code subject to the permissions of the IMAP...

[SECURITY] New version if ipopd prevents exploit

We have received reports that the version of the imap suite in Debian GNU/Linux 2.1 has a vulnerability in its POP-2 daemon, which can be found in the ipopd package. Using this vulnerability it is possible for remote users to get a shell as user "nobody" on the server. We recommend you upgrade yo...

CVE-1999-0920

Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command...

University of Washington pop2d 4.4 - Remote Buffer Overflow

University of Washington pop2d 4.4 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/283/info A buffer overflow vulnerability in pop2d version 4.4 or earlier allow malicious remote users to obtain access to the "nobody" user account. The pop2 and pop3 servers support the conce...

University of Washington pop2d 4.4 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/283/info A buffer overflow vulnerability in pop2d version 4.4 or earlier allow malicious remote users to obtain access to the "nobody" user account. The pop2 and pop3 servers support the concept of an "anonymous proxy", whereby a remote user connecting...

CVE-1999-0643

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...