[SECURITY] [DSA 1108-1] New mutt packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1108-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff Jul 11th, 2006 http://www.debian.org/security/faq -...

Directory traversal

Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the 1 CREATE, 2 SELECT, 3 DELETE, ...

CVE-2006-2917

Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the 1 CREATE, 2 SELECT, 3 DELETE, ...

CVE-2006-2917

WinGate IMAP server directory traversal vulnerability (CVE-2006-2917) affects WinGate 6.1.2.1094 and 6.1.3.1096, and possibly earlier builds before 6.1.4 Build 1099. An authenticated remote user can exploit directory traversal in IMAP commands (CREATE, SELECT, DELETE, RENAME, COPY, APPEND, LIST) ...

CVE-2006-2917

Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the 1 CREATE, 2 SELECT, 3 DELETE, ...

MERCUR Messaging IMAP LOGIN command buffer overflow

Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...

WinGate < 6.1.4 Build 1099 IMAP Service Traversal Arbitrary Mail Access

Binary data 3681.prm...

MERCUR Messaging IMAP LOGIN command buffer overflow

Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...

MERCUR Messaging IMAP LOGIN command buffer overflow

Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...

MERCUR Messaging IMAP LOGIN command buffer overflow

Added: 07/10/2006 CVE: CVE-2006-1255 BID: 17138 OSVDB: 23950 Background MERCUR Messaging 2005 is an e-mail server supporting the SMTP, POP3, and IMAP protocols for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service when processing the LOGIN command allows remote...

CentOS 3 / 4 : squirrelmail (CESA-2006:0283)

An updated squirrelmail package that fixes three security and many other bug issues is now available. This update contains bug fixes of upstream squirrelmail 1.4.6 with some additional improvements to international language support. This update has been rated as having moderate security impact by...

CentOS 3 : imap (CESA-2005:850)

An updated imap package that fixes a buffer overflow issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The imap package provides server daemons for both the IMAP Internet Message Access Protocol and POP Post Office Protoco...

mutt mail agent buffer overflow

Buffer overflow on parsing IMAP server reply...

GLSA-200606-27 : Mutt: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200606-27 Mutt: Buffer overflow TAKAHASHI Tamotsu has discovered that Mutt contains a boundary error in the 'browsegetnamespace' function in browse.c, which can be triggered when receiving an overly long namespace from an IMAP...

USN-307-1: mutt vulnerability

TAKAHASHI Tamotsu discovered that mutt's IMAP backend did not sufficiently check the validity of namespace strings. If an user connects to a malicious IMAP server, that server could exploit this to crash mutt or even execute arbitrary code with the privileges of the mutt user...

Mutt: Buffer overflow

Background Mutt is a small but very powerful text-based mail client. Description TAKAHASHI Tamotsu has discovered that Mutt contains a boundary error in the "browsegetnamespace" function in browse.c, which can be triggered when receiving an overly long namespace from an IMAP server. Impact A...

CVE-2006-3242

Stack-based buffer overflow in the browsegetnamespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via long namespaces received from the IMAP server...

CVE-2006-3242

Stack-based buffer overflow in the browsegetnamespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via long namespaces received from the IMAP server...

DEBIAN-CVE-2006-3242

Stack-based buffer overflow in the browsegetnamespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via long namespaces received from the IMAP server...

CVE-2006-3242

Mutt (affected: 1.4.2.1 and earlier) has a stack-based buffer overflow in browse_get_namespace within imap/browse.c. The flaw allows a remote attacker to crash the client or potentially execute arbitrary code by sending long IMAP namespaces. This CVE (CVE-2006-3242) is linked to multiple advisori...