CentOS 4 : cyrus-imapd (CESA-2005:408)

Updated cyrus-imapd packages that fix several buffer overflow security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-imapd package contains the core of the Cyrus IMAP server. Several buffer overflow bugs we...

CVE-2006-2502

Stack-based buffer overflow in pop3d in Cyrus IMAPD cyrus-imapd 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command...

Stack overflow

Stack-based buffer overflow in pop3d in Cyrus IMAPD cyrus-imapd 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command...

CVE-2006-2502

Stack-based buffer overflow in pop3d in Cyrus IMAPD cyrus-imapd 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command...

CVE-2006-2502

CVE-2006-2502 : The Cyrus IMAPD (cyrus-imapd) 2.3.2 server is vulnerable to a stack-based buffer overflow in pop3d when the popsubfolders option is enabled. A crafted long USER command allows remote attackers to potentially execute arbitrary code. Public references include NVD entry and multiple ...

CVE-2006-2502

Stack-based buffer overflow in pop3d in Cyrus IMAPD cyrus-imapd 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command...

Cyrus IMAPD < 2.3.4 'POP3D USER' Command Remote Overflow

Binary data 3628.prm...

Cyrus IMAPD POP3 server buffer overflow

Buffer overflow on oversized username if popsubfolders options is enabled in imapd.conf...

[Full-disclosure] Cyrus IMAPD pop3d remote compromise aka cyrusFUCK3d

Shouts to blackzero, alex, wY!, revoguard, bogus, wtfomg and all those yankees LOVE TO LISA :- genuine advisory by kcope/zeroday discovered by kcope!!! kingcopeatgmx.net public disclosure 21. May 2006 vendor was not notified mail quota exceeded???? fuck it let's get to business...

CVE-2006-2502: Undefined Security Weakness

Stack-based buffer overflow in pop3d in Cyrus IMAPD cyrus-imapd 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command...

Cyrus IMAPD 2.3.2 - pop3d Remote Buffer Overflow (1)

Cyrus IMAPD 2.3.2 - pop3d Remote Buffer Overflow 1 / zeroday warez !!! PRIVATE - DONT DISTRIBUTE - PRIVATE !!! cyruspop3d.c - cyrus pop3d remote exploit by kcope tested on cyrus-imapd-2.3.2,linux bug found 23 Apr 2006 by kcope -------------------------------------------- imapd/pop3d.c line 1830 :...

Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ======================================================== Cyrus IMAPD 2.3.2 pop3d Remote Buffer Overflow Exploit ======================================================== / zeroday warez !!! PRIVATE - DONT DISTRIBUTE - PRIVATE !!! cyruspop3d.c ...

Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (1)

/ zeroday warez !!! PRIVATE - DONT DISTRIBUTE - PRIVATE !!! cyruspop3d.c - cyrus pop3d remote exploit by kcope tested on cyrus-imapd-2.3.2,linux bug found 23 Apr 2006 by kcope -------------------------------------------- imapd/pop3d.c line 1830 : char userbufMAXMAILBOXNAME+1, p; ... if !ulen ulen...

Cyrus IMAPD pop3d popsubfolders USER Buffer Overflow

This exploit takes advantage of a stack based overflow. Once the stack corruption has occurred it is possible to overwrite a pointer which is later used for a memcpy. This gives us a write anything anywhere condition similar to a format string vulnerability. NOTE: The popsubfolders option is a...

Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit

No description provided by source. / zeroday warez !!! PRIVATE - DONT DISTRIBUTE - PRIVATE !!! cyruspop3d.c - cyrus pop3d remote exploit by kcope tested on cyrus-imapd-2.3.2,linux bug found 23 Apr 2006 by kcope -------------------------------------------- imapd/pop3d.c line 1830 : char...

Ubuntu 4.10 : cyrus21-imapd vulnerability (USN-87-1)

Sean Larsson discovered a buffer overflow in the IMAP 'annotate' extension. This possibly allowed an authenticated IMAP client to execute arbitrary code with the privileges of the Cyrus IMAP server. Note that Tenable Network Security has extracted the preceding description block directly from the...

Ubuntu 4.10 : cyrus21-imapd vulnerability (USN-37-1)

Recently another buffer overflow has been discovered in the SASL authentication module of the Cyrus IMAP server. An off-by-one comparison error in the mysaslcanonuser function could lead to a missing termination of an user name string. This vulnerability could allow remote, attacker-supplied...

Eudora Qualcomm WorldMail 3.0 (IMAPd) Remote Overflow Exploit

No description provided by source. !/usr/bin/python PRE AUTHENTICATION Eudora Qualcomm WorldMail 3.0 IMAPd Service 6.1.19.0 Overflow. Discovered by Tim Shelton - [email protected] Coded by [email protected] Details: SEH gets overwritten at 970 bytes in the LIST command. No space...

[Full-disclosure] [ACSSEC-2005-11-25-0x6] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Format String Overflow ID: ACSSEC-2005-11-25 - 0x6 Class: Format String Overflow Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 IMAPd Service Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005...

Qualcomm WorldMail 3.0 IMAPD LIST Buffer Overflow

This module exploits a stack buffer overflow in the Qualcomm WorldMail IMAP Server version 3.0 builds 6.1.19.0 through 6.1.22.0. Version 6.1.22.1 fixes this particular vulnerability. NOTE: The service does NOT restart automatically by default. You may be limited to only one attempt, so choose...