Ошибка в почтовой библиотеке UW

Некорректная работа с заголовком X-Keywords: позволяет повредить ящик пользователя во всех продуктах работающих с ящиком в формате IMAP imapd, pine. Кроме того, длинная переменная X-Keeyword: может вызвать переполнение буфера...

mailbox format incopatibility in (WU)imap with mail.local

Title : mailbox format incompatibility in WUimap with mail.local Authors : [email protected], [email protected] Impact : malicious user can put message with faked headers in user's mailbox bypassing virus protection, buffer overflow protection and another MTA/MDA filters. Also imap itself or MUA...

re: Re[4]: mailbox parsing problem in imap-4.7c

On Thu, 10 Aug 2000 22:22:27 +0400, 3APA3A wrote: sendmail contains mail.local. mail.local is MDA. At least BSD distributions use mail.local from sendmail. Well, we'll have to hear what the sendmail people say then. I still contend that all lines that are in "From " header format should be quoted...

Ошибка между WU-imap И mail.local

При доставке письма в Unix mailbox mail.local считает, что разделителем между письмами является пустая строка со следующим за ней заголовком "From ". Если в письме встречается такое сочетание, то "From" комментируется знаком ''. К сожалению, imapd считает разделителем строку "From " в определенно...

Re[2]: mailbox parsing problem in imap-4.7c

Hello Mark, I have tested MDAs of different vendors under few OSs. All of them assume empty line to be at the end of message. Most of them comment out "From " in any "nnFrom " pattern. At least qpoper and BSD mail check for empty line under any supported OS and I never heard of any problem becaus...

CVE-2000-0034

Netscape 4.7 is affected by CVE-2000-0034: during IMAP/POP sessions, the application records user passwords in the preferences.js file even when “remember passwords” is not enabled. Root cause is password storage in preferences.js, as documented in PT-1999-1842 and echoed in CVE records. Impact i...

CVE-2000-0034

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."...

CVE-2000-0034: Undefined Security Weakness

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."...

Переполнение буфера в Mercur

Переполнения буфера в различных командах IMAP, POP3...

Проблемы с Mercur Mailserver

Используя протокол IMAP можно обратиться к любому файлу на сервере, включая ящики других рользователей...

CVE-2000-0233

CVE-2000-0233 affects the SuSE Linux IMAP server. The issue allows remote attackers to bypass IMAP authentication and gain privileges. The provided documents state this vulnerability and its impact but do not include concrete exploitation details, affected versions, or root-cause specifics. No re...

CVE-2000-0233

SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges...

CVE-2000-0233: Undefined Security Weakness

SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges...

FreeBSD-SA-00:15.imap-uw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:15 Security Advisory FreeBSD, Inc. Topic: imap-uw allows local users to deny service to any mailbox Category: ports Module: imap-uw Announced: 2000-04-24 Credits: Alex...

FreeBSD-SA-00:14.imap-uw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:14 Security Advisory FreeBSD, Inc. Topic: imap-uw contains security vulnerabilities for "closed" mail servers Category: ports Module: imap-uw Announced: 2000-04-24...

Qualcomm qpopper 2.53/3.0 / RedHat imap 4.5 -4 / UoW imap 4.5 popd - Lock File Denial of Service

source: https://www.securityfocus.com/bid/1132/info Vulnerabilities exist in a number of pop3 daemon implementations, having to do with their creation of lock files. Affected include Qualcomm's qpopper, and the popd included as part of the imap-4 rpm from RedHat. Lockfiles in both implementation...

CVE-2000-0053

Microsoft Commercial Internet System MCIS IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request...

CVE-2000-0053

CVE-2000-0053 affects the Microsoft Commercial Internet System (MCIS) IMAP server. A remote attacker can trigger a denial of service by sending a malformed IMAP request. The NVD entry records a CVSSv2 base score of 7.5 (HIGH) with network access, low attack complexity, no authentication, and part...

CVE-2000-0053: Undefined Security Weakness

Microsoft Commercial Internet System MCIS IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request...

UoW IMAP Server LSUB Buffer Overflow

This module exploits a buffer overflow in the 'LSUB' command of the University of Washington IMAP service. This vulnerability can only be exploited with a valid username and password. Module Options msf use exploit/linux/imap/imap/uwlsub msf undefineduwlsub show actions ...actions... msf...