5583 matches found
CVE-2003-0302
The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...
CVE-2003-0300
The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service crash via certain large literal size values that cause either integer signedness errors or integer overflow errors...
CVE-2003-0297
CVE-2003-0297 affects the c-client IMAP client (as used in imap-2002b and Pine 4.53). The flaw allows remote malicious IMAP servers to trigger a denial of service (crash) and potentially execute arbitrary code via large literal and mailbox size values, due to integer signedness/overflow errors. R...
CVE-2003-0297
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service crash and possibly execute arbitrary code via certain large 1 literal and 2 mailbox size values that cause either integer signedness errors or integer overflow errors...
CVE-2003-0298
The CVE-2003-0298 entry concerns the Mozilla IMAP Client (versions 1.3 and 1.4a). A remote malicious IMAP server can trigger denial of service and possibly arbitrary code execution by sending certain large values for literals (and potentially mailbox sizes) that cause integer signedness or intege...
CVE-2003-0299
The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors...
CVE-2003-0297
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service crash and possibly execute arbitrary code via certain large 1 literal and 2 mailbox size values that cause either integer signedness errors or integer overflow errors...
CVE-2003-0301
The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service crash via certain large literal size values that cause either integer signedness errors or integer overflow errors...
CVE-2003-0296
The CVE-2003-0296 entry concerns the IMAP Client for Evolution 1.2.4. The issue arises from handling of certain large literal size values, triggering integer signedness errors or integer overflow in parsing, which can lead to denial of service and potentially arbitrary code execution. Affected co...
CVE-2003-0299
The CVE-2003-0299 issue affects the IMAP client code used by mutt 1.4.1 and Balsa 2.0.10. A remote malicious IMAP server can trigger denial of service and possibly arbitrary code execution by sending mailbox size values that cause signedness or integer overflow errors in the IMAP handling path. P...
CVE-2003-0302
The CVE-2003-0302 entry concerns the IMAP Client for Eudora 5.2.1. The underlying issue is integer signedness/overflow errors triggered by certain large literal size values from a remote IMAP server, enabling a denial of service and potentially arbitrary code execution. Public documentation confi...
CVE-2003-0298
The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large 1 literal and possibly 2 mailbox size values that cause either integer signedness errors or integer overflow errors...
CVE-2003-0296
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...
Buffer overflows in multiple IMAP clients
There's two common vulnerabilities in IMAP clients written with C and C++: 1. Handling huge literal sizes. Many clients do mallocliteralsize+1 and then read the literal into it. Problem is that if literalsize is UINTMAX-1, the +1 overflows it into malloc0 but server is still allowed to write...
MailMax < 5.0.10.8 Multiple Remote Overflows
The remote host is running a version of the MailMax mail server that is vulnerable to various overflows. These issues may allow an unauthenticated, remote attacker to disable the affected service and possibly to execute arbitrary commands on the affected host. C Tenable Network Security, Inc...
MDaemon IMAP Server CREATE Command Mailbox Name Handling Overflow
According to its banner, the version of MDaemon running on the remote host has a buffer overflow vulnerability in the CREATE command. A remote attacker could exploit this to execute arbitrary code, or cause a denial of service. A crash would prevent other MDaemon services SMTP, POP from running a...
MDaemon SMTP/POP/IMAP server =>v.6.7.5: IMAP buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Damage Hacking Group security advisory www.dhgroup.org Product: MDaemon SMTP/POP/IMAP server =v.6.7.5 Authors: Alt-N Technologies www.mdaemon.com Vulnerability: remote buffer overflow in IMAP service Overview----------------------------------------------------- ...
[CLA-2003:630] Conectiva Security Announcement - balsa
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : balsa SUMMARY : Buffer overflow in IMAP code and ...
CVE-2003-0167
Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than...
CVE-2002-0146
CVE-2002-0146 affects fetchmail prior to 5.9.10. The flaw arises when fetching mail over IMAP: fetchmail allocates an array for message sizes based on the server-reported message count but does not validate that count, allowing a remote IMAP server to cause memory overrun/out-of-bounds writes. Ma...