[Full-disclosure] Kerio MailServer bugfun

Hi, It should be noted that ProtoVer Sample IMAP testsuite has been released with 3 unpublished bugs. Now it looks like that Kerio MailServer preauth bug has been fixed. Kerio MailServer 6.1.3 changelog: """ Version 6.1.3 Patch 1 - March 9, 2006 - Fixed possible crash when handling special crafte...

Command injection

Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service application crash via a crafted IMAP LOGIN command...

CVE-2006-1158

Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service application crash via a crafted IMAP LOGIN command...

CVE-2006-1158

Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service application crash via a crafted IMAP LOGIN command...

CVE-2006-1158: Undefined Security Weakness

Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service application crash via a crafted IMAP LOGIN command...

MDaemon imap server DoS

The remote host is running the MDaemon IMAP server. It is possible to crash the remote version of this softare sending a long argument to the 'LOGIN' command. This problem allows an attacker to make the remote service crash, thus preventing legitimate users from receiving e-mails. OpenVAS...

CVE-2005-1255

Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with 1 a long username argument or 2 a long username...

CVE-2005-1255: Undefined Security Weakness

Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with 1 a long username argument or 2 a long username...

PT-2005-2162 · Calendarscript · Calendarscript

Name of the Vulnerable Software and Affected Versions: CalendarScript version 3.21 Description: A cross-site scripting XSS issue exists in the login command of calendar.pl, allowing remote attackers to inject arbitrary web script or HTML via the username parameter. Recommendations: For...

CVE-2005-1015: Undefined Security Weakness

Buffer overflow in MailEnable Imapd MEIMAP.exe allows remote attackers to execute arbitrary code via a long LOGIN command...

Re: [Full-disclosure] MailEnable Imapd remote BoF + Exploit [x0n3-h4ck]

If you care at all about security, run, don't walk, away from this software. Another simple overflow via the "LOGIN" IMAP command: A001 LOGIN 1024 bytesrn -HD On Tuesday 05 April 2005 12:31, expanders wrote: -=+ Application: Mail Enable Imapd MEIMAP.exe Full-Disclosure - We believe in it. Charter...

HP-UX PHCO_24083 : HP-UX running login(1), Local Increased Privilege (HPSBUX00160 SSRT071385 rev.3)

s700800 11.00 login1 cumulative patch : The login1 command allows restricted shell users to circumvent security checks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO24083. The text itself is copyright C...

CVE-2004-1011

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long 1 PROXY or 2 LOGIN command, a different vulnerability than CVE-2004-1015...

CVE-2004-1011: Undefined Security Weakness

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long 1 PROXY or 2 LOGIN command, a different vulnerability than CVE-2004-1015...

HP Support Information Digests

HP Support Information Digests =============================================================================== o IT Resource Center World Wide Web Service --------------------------------------------------- If you subscribed through the IT Resource Center and would like to be REMOVED from this...

Pragma Systems InterAccess TelnetD Server 4.0 Build 4 - Buffer Overflow

source: https://www.securityfocus.com/bid/995/info The Pragma Systems InterAccess TelnetID Server 4.0 Build 4 has an unchecked buffer in the code that handles login commands. Arbitrary code is capable of being executed on the InterAccess TelnetD Server if a string of over 300 characters is used a...