5211 matches found
Re[2]: mailbox parsing problem in imap-4.7c
Hello Mark, I have tested MDAs of different vendors under few OSs. All of them assume empty line to be at the end of message. Most of them comment out "From " in any "nnFrom " pattern. At least qpoper and BSD mail check for empty line under any supported OS and I never heard of any problem becaus...
re: Re[4]: mailbox parsing problem in imap-4.7c
On Thu, 10 Aug 2000 22:22:27 +0400, 3APA3A wrote: sendmail contains mail.local. mail.local is MDA. At least BSD distributions use mail.local from sendmail. Well, we'll have to hear what the sendmail people say then. I still contend that all lines that are in "From " header format should be quoted...
mailbox format incopatibility in (WU)imap with mail.local
Title : mailbox format incompatibility in WUimap with mail.local Authors : [email protected], [email protected] Impact : malicious user can put message with faked headers in user's mailbox bypassing virus protection, buffer overflow protection and another MTA/MDA filters. Also imap itself or MUA...
CVE-2000-0034
Netscape 4.7 is affected by CVE-2000-0034: during IMAP/POP sessions, the application records user passwords in the preferences.js file even when “remember passwords” is not enabled. Root cause is password storage in preferences.js, as documented in PT-1999-1842 and echoed in CVE records. Impact i...
CVE-2000-0034
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."...
Проблемы с Mercur Mailserver
Используя протокол IMAP можно обратиться к любому файлу на сервере, включая ящики других рользователей...
Переполнение буфера в Mercur
Переполнения буфера в различных командах IMAP, POP3...
CVE-2000-0233
SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges...
CVE-2000-0233
CVE-2000-0233 affects the SuSE Linux IMAP server. The issue allows remote attackers to bypass IMAP authentication and gain privileges. The provided documents state this vulnerability and its impact but do not include concrete exploitation details, affected versions, or root-cause specifics. No re...
FreeBSD-SA-00:15.imap-uw
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:15 Security Advisory FreeBSD, Inc. Topic: imap-uw allows local users to deny service to any mailbox Category: ports Module: imap-uw Announced: 2000-04-24 Credits: Alex...
FreeBSD-SA-00:14.imap-uw
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:14 Security Advisory FreeBSD, Inc. Topic: imap-uw contains security vulnerabilities for "closed" mail servers Category: ports Module: imap-uw Announced: 2000-04-24...
Qualcomm qpopper 2.53/3.0 / RedHat imap 4.5 -4 / UoW imap 4.5 popd - Lock File Denial of Service
source: https://www.securityfocus.com/bid/1132/info Vulnerabilities exist in a number of pop3 daemon implementations, having to do with their creation of lock files. Affected include Qualcomm's qpopper, and the popd included as part of the imap-4 rpm from RedHat. Lockfiles in both implementation...
CVE-2000-0053
Microsoft Commercial Internet System MCIS IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request...
CVE-2000-0053
CVE-2000-0053 affects the Microsoft Commercial Internet System (MCIS) IMAP server. A remote attacker can trigger a denial of service by sending a malformed IMAP request. The NVD entry records a CVSSv2 base score of 7.5 (HIGH) with network access, low attack complexity, no authentication, and part...
University of Washington - imap LSUB Buffer Overflow (Metasploit)
University of Washington - imap LSUB Buffer Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
University of Washington - imap LSUB Buffer Overflow (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'UoW IMAP...
CVE-2000-0198
CVE-2000-0198 affects the MERCUR mail server suite’s POP3 and IMAP servers. The issue is a buffer overflow that allows remote attackers to cause a denial of service. The public documents cite a base severity of MEDIUM (CVSS v2.0: AV:N/AC:L/Au:N/C:N/I:N/A:P) with a network attack vector and no aut...
CVE-1999-0920
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command...
CVE-1999-0920
CVE-1999-0920 affects the pop-2d POP daemon in the IMAP package. The root cause is a buffer overflow triggered by the FOLD command, enabling remote attackers to gain privileges. Public references describe the issue as high-severity with a network‑vectored, low‑complexity exploit and a CVSS v2 bas...
