47 matches found
CVE-2005-1255
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with 1 a long username argument or 2 a long username...
PT-2005-2162 · Calendarscript · Calendarscript
Name of the Vulnerable Software and Affected Versions: CalendarScript version 3.21 Description: A cross-site scripting XSS issue exists in the login command of calendar.pl, allowing remote attackers to inject arbitrary web script or HTML via the username parameter. Recommendations: For...
Re: [Full-disclosure] MailEnable Imapd remote BoF + Exploit [x0n3-h4ck]
If you care at all about security, run, don't walk, away from this software. Another simple overflow via the "LOGIN" IMAP command: A001 LOGIN 1024 bytesrn -HD On Tuesday 05 April 2005 12:31, expanders wrote: -=+ Application: Mail Enable Imapd MEIMAP.exe Full-Disclosure - We believe in it. Charter...
HP-UX PHCO_24083 : HP-UX running login(1), Local Increased Privilege (HPSBUX00160 SSRT071385 rev.3)
s700800 11.00 login1 cumulative patch : The login1 command allows restricted shell users to circumvent security checks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO24083. The text itself is copyright C...
CVE-2004-1011
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long 1 PROXY or 2 LOGIN command, a different vulnerability than CVE-2004-1015...
HP Support Information Digests
HP Support Information Digests =============================================================================== o IT Resource Center World Wide Web Service --------------------------------------------------- If you subscribed through the IT Resource Center and would like to be REMOVED from this...
Pragma Systems InterAccess TelnetD Server 4.0 Build 4 - Buffer Overflow
source: https://www.securityfocus.com/bid/995/info The Pragma Systems InterAccess TelnetID Server 4.0 Build 4 has an unchecked buffer in the code that handles login commands. Arbitrary code is capable of being executed on the InterAccess TelnetD Server if a string of over 300 characters is used a...