Important: Red Hat Security Advisory: balsa security update

Updated Balsa packages are available which fix potential vulnerabilities in the IMAP handling code and in libesmtp. Balsa is a GNOME email client which includes code from Mutt. A potential buffer overflow exists in Balsa versions 1.2 and higher when parsing mailbox names returned by an IMAP serve...

CVE-2003-0319

CVE-2003-0319: A buffer overflow in the MailMax IMAP server (MailMax/SmartMax) affects version 5.0.10.8 and earlier. The vulnerability allows remote authenticated users to execute arbitrary code via a long SELECT command. Exploitation details are supported by NVD/Nessus entries. Remediation: upgr...

MailMax IMAP Server SELECT Command Remote Overflow

The remote host is running a version of the MailMax IMAP server which, according to its version number, is vulnerable to various overflows which may allow an authenticated user to execute arbitrary commands on this host or to disable it remotely. C Tenable Network Security, Inc. Ref: Date: Sat, 1...

CVE-2003-0298

The CVE-2003-0298 entry concerns the Mozilla IMAP Client (versions 1.3 and 1.4a). A remote malicious IMAP server can trigger denial of service and possibly arbitrary code execution by sending certain large values for literals (and potentially mailbox sizes) that cause integer signedness or intege...

CVE-2003-0297

CVE-2003-0297 affects the c-client IMAP client (as used in imap-2002b and Pine 4.53). The flaw allows remote malicious IMAP servers to trigger a denial of service (crash) and potentially execute arbitrary code via large literal and mailbox size values, due to integer signedness/overflow errors. R...

CVE-2003-0296

The CVE-2003-0296 entry concerns the IMAP Client for Evolution 1.2.4. The issue arises from handling of certain large literal size values, triggering integer signedness errors or integer overflow in parsing, which can lead to denial of service and potentially arbitrary code execution. Affected co...

CVE-2003-0302

The CVE-2003-0302 entry concerns the IMAP Client for Eudora 5.2.1. The underlying issue is integer signedness/overflow errors triggered by certain large literal size values from a remote IMAP server, enabling a denial of service and potentially arbitrary code execution. Public documentation confi...

CVE-2003-0299

The CVE-2003-0299 issue affects the IMAP client code used by mutt 1.4.1 and Balsa 2.0.10. A remote malicious IMAP server can trigger denial of service and possibly arbitrary code execution by sending mailbox size values that cause signedness or integer overflow errors in the IMAP handling path. P...

CVE-2003-0300

CVE-2003-0300 concerns the IMAP Client for Sylpheed 0.8.11. A remote IMAP server can trigger a denial-of-service (crash) by sending certain large literal size values that lead to signedness errors or integer overflow in the client. The available sources describe the vulnerability as a DoS conditi...

CVE-2003-0301

CVE-2003-0301 concerns the IMAP Client for Outlook Express 6.00.2800.1106. The issue is triggered by certain large literal size values that cause integer signedness or integer overflow errors during parsing, enabling remote servers to induce a denial of service (crash). The public sources in the ...

CVE-2003-0302

The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0296

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0297

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service crash and possibly execute arbitrary code via certain large 1 literal and 2 mailbox size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0299

The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0298

The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large 1 literal and possibly 2 mailbox size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0301

The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service crash via certain large literal size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0300

The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service crash via certain large literal size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0297

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service crash and possibly execute arbitrary code via certain large 1 literal and 2 mailbox size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0296

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

Buffer overflows in multiple IMAP clients

There's two common vulnerabilities in IMAP clients written with C and C++: 1. Handling huge literal sizes. Many clients do mallocliteralsize+1 and then read the literal into it. Problem is that if literalsize is UINTMAX-1, the +1 overflows it into malloc0 but server is still allowed to write...