Debian Security Advisory DSA 597-1 (cyrus-imapd)

The remote host is missing an update to cyrus-imapd announced via advisory DSA 597-1. OpenVAS Vulnerability Test $Id: deb5971.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 597-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Perdition IMAP代理str_vwrite函数远程格式串处理漏洞

BUGTRAQ ID: 26270 Perdition是一款POP3和IMAP4代理服务器。 Perdition IMAPD的一个IMAP输出字符串格式化函数中存在格式串漏洞，远程攻击者可能利用此漏洞控制服务器。 在某些情况下，未经验证便将IMAP标签（IMAP命令的最初部分）拷贝到了字符缓冲区，然后做为格式串将这个缓冲区传送给了vsnprintf。在调用vsnprintf之前，执行了以下格式串验证以防范注入： str.c： ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 168:...

Perdition IMAPD IMAP Tag Remote Format String Arbitrary Code Execution

The remote IMAP service is actually a Perdition IMAP proxy. The version of Perdition installed on the remote host appears to be affected by a format string vulnerability in which it copies the IMAP tag into a character buffer without first validating it and then passes it to 'vsnprintf' as a form...

Format string

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

CVE-2007-5740: Use of Externally-Controlled Format String

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism...

Stack overflow

Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command. NOTE: this issue might overlap with CVE-2004-1211...

CVE-2007-5018

Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command. NOTE: this issue might overlap with CVE-2004-1211...

CVE-2007-5018

CVE-2007-5018 describes a stack-based buffer overflow in Mercury/32 IMAPD (Mercury Mail) version around 4.52, exploitable by sending a long argument in a SEARCH ON command by an authenticated remote user, allowing arbitrary code execution. The entry notes overlap with CVE-2004-1211. Public refere...

CVE-2007-5018

Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command. NOTE: this issue might overlap with CVE-2004-1211...

CVE-2007-5018: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command. NOTE: this issue might overlap with CVE-2004-1211...

Mercury32 4.52 IMAPD - SEARCH (Authenticated) Overflow

Mercury32 4.52 IMAPD - SEARCH Authenticated Overflow Z:\ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found & Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void...

Mercury/32 4.52 IMAPD SEARCH command Post-Auth Overflow Exploit

No description provided by source. Z:ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void ph4nt0m.org S: pst06...

Mercury/32 4.52 IMAPD SEARCH command Post-Auth Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================================== Mercury/32 4.52 IMAPD SEARCH command Post-Auth Overflow Exploit =============================================================== Z:\ExpmercurySEARCH.pl 127.0.0.1 143 void...

Mercury/32 4.52 IMAPD - 'SEARCH' (Authenticated) Overflow

Z:\ExpmercurySEARCH.pl 127.0.0.1 143 void ph4nt0m.org Mercury/32 v4.52 IMAPD SEARCH command Post-Auth Stack Overflow Exploit Found & Code by void ph4nt0m.org S: OK mercury.ph4nt0m.org IMAP4rev1 Mercury/32 v4.52 server ready. C: pst06 LOGIN void ph4nt0m.org S: pst06 OK LOGIN completed. C: pst06...

IPSwitch IMail Server 8.20 - IMAPD Remote Buffer Overflow

IPSwitch IMail Server 8.20 - IMAPD Remote Buffer Overflow / Dreatica-FXP crew ---------------------------------------- Target : Ipswitch IMAIL Server IMAPD 7.13 - 8.20 exploit Site : http://www.ipswitch.com Found by : iDEFENSE Security...