CVE-2004-1015

CVE-2004-1015 refers to a buffer overflow in the proxyd component of Cyrus IMAP Server

CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...

CVE-2004-1013

CVE-2004-1013 affects Cyrus IMAP Server 2.2.x–2.2.8. The argument parser for FETCH can be exploited by remote authenticated users through commands such as body[p or binary[p, triggering an index increment error that causes out-of-bounds memory corruption and allows arbitrary code execution. The v...

CVE-2004-1015

Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011...

CVE-2004-1011

CVE-2004-1011 describes a stack-based overflow in Cyrus IMAP Server 2.2.4–2.2.8 when the imapmagicplus option is enabled. The overflow occurs in handling long PROXY or LOGIN commands, due to copying the username into a small stack buffer without proper length checks, allowing a remote attacker to...

CVE-2004-1013

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...

CVE-2004-1012

CVE-2004-1012 affects Cyrus IMAP Server 2.2.6 and earlier. The vulnerability arises in the PARTIAL command argument parsing: a command like body[ p is treated as body.peek, triggering an index increment error and out-of-bounds memory corruption that enables remote authenticated code execution. Co...

CVE-2004-1013

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...

CVE-2004-1015

Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011...

CVE-2004-1011

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long 1 PROXY or 2 LOGIN command, a different vulnerability than CVE-2004-1015...

CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...

Mercury Mail 4.01 (Pegasus) IMAP Buffer Overflow v2 (c code)

Exploit for unknown platform in category remote exploits ============================================================ Mercury Mail 4.01 Pegasus IMAP Buffer Overflow v2 c code ============================================================ / Remote Mercury32 Imap exploit 14 types of attacks WOW! By:...

Mercury32 Mail Server 4.01 - Pegasus IMAP Buffer Overflow (2)

Mercury32 Mail Server 4.01 - Pegasus IMAP Buffer Overflow 2 / Remote Mercury32 Imap exploit 14 types of attacks WOW! By: [email protected] Notes: Second public release and both of them are murcury32 ; Again someone posted some dos code : why bother? If you spent the time to look, it uses the sa...

Hydra: IMAP

This plugin runs Hydra to find IMAP accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

Mercury Mail 4.01 (Pegasus) IMAP Buffer Overflow v2 (c code)

No description provided by source. / Remote Mercury32 Imap exploit 14 types of attacks WOW! By: [email protected] Notes: Second public release and both of them are murcury32 ; Again someone posted some dos code : why bother? If you spent the time to look, it uses the same buffer for all 14 type...

Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (2)

/ Remote Mercury32 Imap exploit 14 types of attacks WOW! By: [email protected] Notes: Second public release and both of them are murcury32 ; Again someone posted some dos code : why bother? If you spent the time to look, it uses the same buffer for all 14 types of attacks and the size does not...

Mercury Mail 4.01 (Pegasus) IMAP Buffer Overflow Exploit (c code)

Exploit for unknown platform in category remote exploits ================================================================= Mercury Mail 4.01 Pegasus IMAP Buffer Overflow Exploit c code ================================================================= / whitehat.co.il comments removed do to muts...

MailEnable IMAP Server Multiple Remote Buffer Overflows

The target is running at least one instance of MailEnable's IMAP service. Two flaws exist in MailEnable Professional Edition 1.52 and earlier as well as MailEnable Enterprise Edition 1.01 and earlier - a stack-based buffer overflow and an object pointer overwrite. A remote attacker can use either...

IMAP Service Cleartext Login Permitted

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. This script was...

up-imapproxy IMAP Proxy IMAP_Line_Read() Function Literal Size DoS

The remote host is running at least one instance of up-imapproxy that does not properly handle IMAP literals. This flaw allows a remote attacker to crash the proxy, killing existing connections as well as preventing new ones, by using literals at unexpected times. This script was written by Georg...