CVE-2007-1578: Undefined Security Weakness

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD mcrimap4.exe 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow...

CVE-2007-1579: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command...

CVE-2003-1322: Undefined Security Weakness

Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long 1 EXAMINE, 2 DELETE, 3 SUBSCRIBE, 4 RENAME, 5 UNSUBSCRIBE, 6 LIST, 7 LSUB, 8 STATUS, 9 LOGIN, 10 CREATE, or 11 SELECT command...

Mercur IMAPD 5.00.14 Remote Denial of Service Exploit (win32)

No description provided by source. !/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote exploit by mu-b - Dec 2006 - Tested on: Mercur v5.00.14 win32 use Getopt::Std; getopts't:n:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target = $arg't' if !defined$target my...

Mercur IMAPD 5.00.14 (Windows x86) - Remote Denial of Service

!/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote exploit by mu-b - Dec 2006 - Tested on: Mercur v5.00.14 win32 use Getopt::Std; getopts't:n:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target = $arg't' if !defined$target my $imapdport = 143; my $senddelay = 1; if...

Mercur IMAPD 5.00.14 (Windows x86) - Remote Denial of Service

Mercur IMAPD 5.00.14 Windows x86 - Remote Denial of Service !/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote exploit by mu-b - Dec 2006 - Tested on: Mercur v5.00.14 win32 use Getopt::Std; getopts't:n:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target = $arg't' if...

Mercur IMAPD 5.00.14 Remote Denial of Service Exploit (win32)

Exploit for unknown platform in category dos / poc ============================================================= Mercur IMAPD 5.00.14 Remote Denial of Service Exploit win32 ============================================================= !/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote explo...

[Full-disclosure] Mercury/32 4.01b

Attached is a remote exploit disarmed PoC for Mercury/32 4.01b IMAPD. The vulnerability is located in the call:- 034646AE call sub346ECD9 which is passes as third argument the number of bytes remaining in a stack buffer in order to construct the complete command from the continuation data. Howeve...

MailEnable Enterprise <= 2.32 - 2.34 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl maildisable-v3.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Thu Nov 23 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32...

MailEnable IMAPD Enterprise 2.32 < 2.34 - Remote Buffer Overflow

!/usr/bin/perl maildisable-v3.pl Mail Enable Professional/Enterprise v2.32-4 win32 remote exploit by mu-b - Thu Nov 23 2006 - Tested on: Mail Enable Professional v2.32 win32 - with HOTFIX Mail Enable Professional v2.33 win32 Mail Enable Professional v2.34 win32 what does this remind you off? Note...

MailEnable IMAPD Professional 2.35 - Remote Buffer Overflow

MailEnable IMAPD Professional 2.35 - Remote Buffer Overflow !/usr/bin/perl maildisable-v6.pl Mail Enable Professional =v2.35 win32 remote exploit by mu-b - Tue Dec 5 2006 - Tested on: Mail Enable Professional v2.35 win32 Note: timing is quite critical with this!!, so change $senddelay if it doesn...

CVE-2007-0618

Unspecified vulnerability in 1 pop3d, 2 pop3ds, 3 imapd, and 4 imapds in IBM AIX 5.3.0 has unspecified impact and attack vectors, involving an "authentication vulnerability."...

CVE-2007-0618: Undefined Security Weakness

Unspecified vulnerability in 1 pop3d, 2 pop3ds, 3 imapd, and 4 imapds in IBM AIX 5.3.0 has unspecified impact and attack vectors, involving an "authentication vulnerability."...

CVE-2006-6762

The IMAP daemon IMAPD in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of service via an APPEND command with a single "" parenthesis in the argument...

CVE-2006-6762

The IMAP daemon IMAPD in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of service via an APPEND command with a single "" parenthesis in the argument...

CVE-2006-6762

The CVE-2006-6762 entry affects Novell NetMail’s IMAP server (IMAPD) prior to 3.52e FTF2. A buffer overflow may occur when processing parameters to the APPEND command, enabling a remote authenticated attacker to cause a denial-of-service. Remediation: apply the vendor update per Novell document 3...

CVE-2006-6761: Undefined Security Weakness

Stack-based buffer overflow in the IMAP daemon IMAPD in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via a long argument to the SUBSCRIBE command...

CVE-2006-6425: Undefined Security Weakness

Stack-based buffer overflow in the IMAP daemon IMAPD in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via unspecified vectors involving the APPEND command...

CVE-2006-6762: Undefined Security Weakness

The IMAP daemon IMAPD in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of service via an APPEND command with a single "" parenthesis in the argument...

CVE-2006-6424: Undefined Security Weakness

Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code 1 by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and 2 via crafted arguments to the STOR command to the...