CVE-2000-0087

Netscape Mail Notification nsnotify utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext...

CVE-2002-0146

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...

CVE-2002-0379

Buffer overflow in University of Washington imap server uw-imapd imap-2001 imapd 2001.315 and imap-2001a imapd 2001.315 with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request...

WU-IMAP 2000.287(1-2) Remote Exploit

Exploit for linux platform in category remote exploits ==================================== WU-IMAP 2000.2871-2 Remote Exploit ==================================== / 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source...

WU-IMAP 2000.287(1-2) - Remote Overflow

/ 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties, copied or duplicated in any...

WU-IMAP 2000.287(1-2) - Remote Overflow

WU-IMAP 2000.2871-2 - Remote Overflow / 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to thir...

CVE-2000-0087: Undefined Security Weakness

Netscape Mail Notification nsnotify utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext...

File system access in imap-uw

By design it's possible to access any file readable by user's account...

SECURITY.NNOV: Courier CPU exhaustion + bonus on imap-uw

Imap-uw allows user to access any file he could access locally. It's not a bug it's insecurity by design. According to vendor's web FAQ it's not pointed in FAQ inside program distribution: -=-=-=-=-=-=- 5.1 I see that the IMAP server allows access to arbitary files on the system, including...

University of Washington imap Server (uw-imapd) BODY Request Remote Overflow

The remote version of UW-IMAP is vulnerable to a buffer overflow condition that could allow an authenticated attacker to execute arbitrary code on the remote host with the privileges of the IMAP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

wu-imap buffer overflow condition

10.05.2002 SECURITY BUG REPORT Affected version: WU-IMAP 2000.283 default install WU-IMAP 2000.284 default install WU-IMAP 2000.287 default install WU-IMAP 2001.315 compiled with RFC 1730 support Overview: Wu-imapd is an easy to set-up IMAP daemon created and distributed by Washington University...

Buffer overflow in imap-uw

BODY command with oversized argument causes buffer overflow...

CVE-2001-1154

CVE-2001-1154 affects Cyrus mail servers (versions 2.0.15, 2.0.16, and 1.6.24) running on BSDi 4.2 with IMAP enabled. The issue allows remote attackers to cause a denial-of-service condition (hang) by leveraging PHP IMAP clients. The available documents confirm the affected software stack and the...

CVE-2001-1154

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service hang using PHP IMAP clients...

CVE-2001-1154: Undefined Security Weakness

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service hang using PHP IMAP clients...

CVE-2001-1009

CVE-2001-1009 affects fetchmail (fetchmail-ssl) prior to 5.8.17. Multiple OpenVAS/DSA/Nessus entries describe a memory corruption in the IMAP and POP3 code where unverified input and missing bounds checking can allow a remote attacker—by controlling the server the client connects to—to cause writ...

CVE-2001-1009

Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...

Formatting string bug on cyrus-sasl library

This issue may be already have been on list. I assume that the moderator this case rejects this mail. On last non-beta version of cyrus-sasl library have formatting string bug on default logging callback. Default cyrys sasl logging callback is static int saslsyslogvoid context attributeunused, in...

CVE-2001-0473

Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands...

CVE-2001-0473

CVE-2001-0473 affects the Mutt email client (Imap-related code) prior to version 1.2.5. The vulnerability is a format string issue in the IMAP handling that can allow a remote, malicious IMAP server to execute arbitrary commands on the local machine. The Mandrakelinux MDKSA-2001:031 advisory spec...