4922 matches found
MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)
$Id: mdaemoncrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
CVE-2004-2292
CVE-2004-2292 affects Alt-N MDaemon 7.0.1: a buffer overflow in the IMAP server triggered by a long STATUS command allows remote attackers to cause a denial of service (application crash). The available documents confirm the vulnerable component (IMAP STATUS handling) and the impact (DoS); no exp...
Alt-N MDaemon < 8.0.4 IMAP Multiple Buffer Overflows
Binary data 3105.prm...
MDaemon IMAP Server Multiple AUTHENTICATE Commands Remote Overflow
According to its banner, the remote version of MDaemon has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues to crash the service, or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Alt-N MDaemon 8.0 - IMAP Server CREATE Remote Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/14315/info Alt-N MDaemon IMAP Server is affected by a remote buffer overflow vulnerability. This issue presents itself when an attacker submits excessive data through the CREATE command subsequent to authentication This vulnerability may be leveraged to...
Multiple MDaemon mail server vulnerabilities
DoS on incomlete CRAM-MD4 handshake, buffer overflow on IMAP CREATE command...
CVE-2005-2278
Stack-based buffer overflow in the IMAP daemon imapd in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name...
CVE-2005-2278
Stack-based buffer overflow in the IMAP daemon imapd in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name...
CVE-2005-2278
The CVE-2005-2278 issue affects MailEnable Professional IMAPD 1.54. A stack-based buffer overflow occurs in the IMAP STATUS command when handling long mailbox names, exploitable by an authenticated remote user to execute arbitrary code. Valid exploits are evidenced by multiple sources (Metasploit...
SquirrelMail Arbitrary Variable Overwriting Vulnerability
GulfTech Security Research July 14th, 2005 Vendor : The SquirrelMail Project Team URL : http://www.squirrelmail.org/ Version : SquirrelMail 1.4.5-RC1 && Earlier Risk : Variable Overwriting Description: SquirrelMail is a standards-based webmail package written in php. It includes built-in pure PHP...
MailEnable IMAP STATUS Command Remote Overflow
The remote host is running a version of MailEnable's IMAP service that is prone to a buffer overflow attack when processing a STATUS command with a long mailbox name. Once authenticated, an attacker can exploit this flaw to execute arbitrary code subject to the privileges of the affected...
MailEnable mail server multiple vulnerabilities
DoS on extended ASCII characted in EHLO command. Multiple IMAP buffer overflows. Authorization HTTPS buffer overflow...
MailEnable IMAP STATUS Command Remote Overflow
Binary data 3068.prm...
[SA15986] MailEnable IMAP "STATUS" Command Buffer Overflow
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
FreeBSD : imap-uw -- authentication bypass when CRAM-MD5 is enabled (d1bbc235-c0c9-45cd-8d2d-c1b8fd22e616)
The CRAM-MD5 authentication support of the University of Washington IMAP and POP3 servers contains a vulnerability that may allow an attacker to bypass authentication and impersonate arbitrary users. Only installations with CRAM-MD5 support configured are affected. %NASLMINLEVEL 70300 C Tenable...
CVE-2004-2194
CVE-2004-2194 – MailEnable DoS . Affected: MailEnable Professional Edition < 1.53 and Enterprise Edition
CVE-2004-2194
MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service crash via malformed 1 SMTP or 2 IMAP commands...
IA eMailServer IMAP format string vulnerability
IMAP mail server LIST command format strinb vulnerability...
CVE-2002-1782
The CVE-2002-1782 entry concerns the University of Washington IMAP daemon (wu-imapd). In default configurations on systems that deny shell access, an authenticated IMAP user can read arbitrary files as that user. This is supported by multiple connected sources (OpenVAS/Nessus entries) describing ...
CVE-2002-1782
The default configuration of University of Washington IMAP daemon wu-imapd, when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user...