5211 matches found
CVE-2003-0296
The CVE-2003-0296 entry concerns the IMAP Client for Evolution 1.2.4. The issue arises from handling of certain large literal size values, triggering integer signedness errors or integer overflow in parsing, which can lead to denial of service and potentially arbitrary code execution. Affected co...
CVE-2003-0296
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...
Buffer overflows in multiple IMAP clients
There's two common vulnerabilities in IMAP clients written with C and C++: 1. Handling huge literal sizes. Many clients do mallocliteralsize+1 and then read the literal into it. Problem is that if literalsize is UINTMAX-1, the +1 overflows it into malloc0 but server is still allowed to write...
MailMax < 5.0.10.8 Multiple Remote Overflows
The remote host is running a version of the MailMax mail server that is vulnerable to various overflows. These issues may allow an unauthenticated, remote attacker to disable the affected service and possibly to execute arbitrary commands on the affected host. C Tenable Network Security, Inc...
MDaemon IMAP Server CREATE Command Mailbox Name Handling Overflow
According to its banner, the version of MDaemon running on the remote host has a buffer overflow vulnerability in the CREATE command. A remote attacker could exploit this to execute arbitrary code, or cause a denial of service. A crash would prevent other MDaemon services SMTP, POP from running a...
MDaemon SMTP/POP/IMAP server =>v.6.7.5: IMAP buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Damage Hacking Group security advisory www.dhgroup.org Product: MDaemon SMTP/POP/IMAP server =v.6.7.5 Authors: Alt-N Technologies www.mdaemon.com Vulnerability: remote buffer overflow in IMAP service Overview----------------------------------------------------- ...
[CLA-2003:630] Conectiva Security Announcement - balsa
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : balsa SUMMARY : Buffer overflow in IMAP code and ...
CVE-2003-0167
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than...
CVE-2002-0146
CVE-2002-0146 affects fetchmail prior to 5.9.10. The flaw arises when fetching mail over IMAP: fetchmail allocates an array for message sizes based on the server-reported message count but does not validate that count, allowing a remote IMAP server to cause memory overrun/out-of-bounds writes. Ma...
CVE-2002-0146
fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...
CVE-2002-0379
Buffer overflow in University of Washington imap server uw-imapd imap-2001 imapd 2001.315 and imap-2001a imapd 2001.315 with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request...
CVE-2002-0379
CVE-2002-0379 describes a buffer overflow in the University of Washington UW-IMAPd server (uw-imapd) for imap-2001/imapd 2001.315 and imap-2001a/imapd 2001.315, and imapd 2000.287 and earlier, when handling legacy RFC 1730 BODY requests. The vulnerability allows a remote authenticated user to exe...
CVE-2003-0167
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than...
Mutt buffer overflow in IMAP support
The mutt mail client packages in Slackware 8.1 and 9.0 have been upgraded to mutt-1.4.1i to fix a security problem discovered by Core Security Technologies. This issue may allow a remote attacker controlling a malicious IMAP server to execute code on your machine as the user running mutt if you...
CVE-2003-0167
The CVE-2003-0167 entry concerns multiple off-by-one buffer overflows in the IMAP capability of Mutt (<=1.3.28) and Balsa (
CVE-2003-0167
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than...
DSA-274 mutt - buffer overflow
Bulletin has no description...
DSA-268 mutt - buffer overflow
Bulletin has no description...
CVE-2003-0140
Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...
CVE-2003-0140
Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...