Cyrus imapd 2.2.4 - 2.2.8 (imapmagicplus) Remote Exploit

Exploit for linux platform in category remote exploits ======================================================== Cyrus imapd 2.2.4 - 2.2.8 imapmagicplus Remote Exploit ======================================================== / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x /...

Cyrus imapd 2.2.4 2.2.8 - imapmagicplus Remote Overflow

Cyrus imapd 2.2.4 2.2.8 - imapmagicplus Remote Overflow / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x / unl0ck Bug found by Stefan Esser www.unl0ck.org / www.coredumped.info [email protected] / [email protected] Greets to: all GOTFault ex-member, unl0ck, scozar, eos-indi...

Cyrus imapd 2.2.4 < 2.2.8 - 'imapmagicplus' Remote Overflow

/ Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x / unl0ck Bug found by Stefan Esser www.unl0ck.org / www.coredumped.info [email protected] / [email protected] Greets to: all GOTFault ex-member, unl0ck, scozar, eos-india, xesio and all my other friends Thanks to: n2n Why: Th...

CVE-2002-1604

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to 1 csh, 2 dtsession, 3 dxsysinfo, 4 imapd, 5 inc, 6 uucp, 7 uux, 8 rdist, or 9 deliver...

Mandrake Linux Security Advisory : cyrus-imapd (MDKSA-2005:051)

Several overruns have been fixed in the IMAP annote extension as well as in cached header handling which can be run by an authenticated user. As well, additional bounds checking in fetchnews was improved to avoid exploitation by a peer news admin. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2005-0546

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via 1 an off-by-one error in the imapd annotate extension, 2 an off-by-one error in "cached header handling," 3 a stack-based buffer overflow in fetchnews, or 4 a stack-based buffer overflow in...

CVE-2005-0546

CVE-2005-0546 concerns multiple buffer overflows in Cyrus IMAPd before 2.2.11. The vulnerability affects the Cyrus IMAP server component imapd and related fetchnews and header handling paths, including an off-by-one in the imapd annotate extension and stack-based overflows in fetchnews and cached...

SUSE-SA:2005:009: cyrus-imapd

The remote host is missing the patch for the advisory SUSE-SA:2005:009 cyrus-imapd. This update fixes one-byte buffer overruns in the cyrus-imapd IMAP server package. Several overruns were fixed in the IMAP annote extension as well as in cached header handling which can be run by an authenticated...

Cyrus IMAPD < 2.2.12 Multiple Remote Overflows

Binary data 2645.prm...

[SA14057] UW-imapd CRAM-MD5 Authentication Bypass Vulnerability

TITLE: UW-imapd CRAM-MD5 Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA14057 VERIFY ADVISORY: http://secunia.com/advisories/14057/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: UW-imapd http://secunia.com/product/1578/ DESCRIPTION: A vulnerability...

UW-imapd CRAM-MD5 Authentication Bypass

Binary data 2568.prm...

[SA13448] NetMail IMAPD Unspecified Buffer Overflow Vulnerability

TITLE: NetMail IMAPD Unspecified Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13448 VERIFY ADVISORY: http://secunia.com/advisories/13448/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Novell NetMail 3.x http://secunia.com/product/1530/ DESCRIPTION: A...

SUSE-SA:2004:043: cyrus-imapd

The remote host is missing the patch for the advisory SUSE-SA:2004:043 cyrus-imapd. Stefan Esser reported various bugs within the Cyrus IMAP Server. These include buffer overflows and out-of-bounds memory access which could allow remote attackers to execute arbitrary commands as root. The bugs...

Fedora Core 2 : cyrus-imapd-2.2.10-1.fc2 (2004-489)

Fix several buffer overflow problems that could be used as an exploit. Fixes the following security advisories: CVE-2004-1011 CVE-2004-1012 CVE-2004-1013 CVE-2004-1015 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora Core 3 : cyrus-imapd-2.2.10-1.fc3 (2004-487)

Fix several buffer overflow problems that could be used as an exploit. Fixes the following security advisories: CVE-2004-1011 CVE-2004-1012 CVE-2004-1013 CVE-2004-1015 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Debian DSA-597-1 : cyrus-imapd - buffer overflow

Stefan Esser discovered several security related problems in the Cyrus IMAP daemon. Due to a bug in the command parser it is possible to access memory beyond the allocated buffer in two places which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Security fix for the ALT Linux 8 package cyrus-imapd version 2.2.10-alt1

Nov. 24, 2004 Alexei Takaseev 2.2.10-alt1 - 2.2.10 - CAN-2004-1015...

Cyrus IMAPD < 2.2.10 Multiple Vulnerabilities

Binary data 2425.prm...

Security fix for the ALT Linux 8 package cyrus-imapd version 2.2.9-alt1

Nov. 23, 2004 Alexei Takaseev 2.2.9-alt1 - 2.2.9 - This release implements several bugfixes, notably one where lmtpproxyd could reuse a freed connection, another involving a pre-authentication buffer overrun in "imap magic plus" support CAN-2004-1011 and lack of bounds checking in PARTIAL and...

Cyrus IMAPd -- PARTIAL command out of bounds memory corruption

Due to a bug within the argument parser of the partial command an argument like "bodyp" will be wrongly detected as "body.peek". Because of this the bufferposition gets increased by 10 instead of 5 and could therefore point outside the allocated memory buffer for the rest of the parsing process. ...