Lucene search
+L

1504 matches found

Packet Storm
Packet Storm
added 2006/05/29 12:0 a.m.24 views

Kaspersky6-POP3.txt

Kaspersky antivirus 6 Kaspersky internet security 6 www.kaspersky.com Vulnerable Systems: KAV6, KIS6 Detail: The vulnerability is caused due to POP3 state machine error in POP3 monitor Kaspersky Mail-antivirus. Any mailicious software on local computer can bypass POP3 virus monitor. Solution: The...

7.4AI score
Exploits0
Prion
Prion
added 2006/05/28 11:2 p.m.16 views

Open redirect

useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the...

3.7CVSS6.3AI score0.00444EPSS
Exploits0References26Affected Software1
OSV
OSV
added 2006/05/28 11:2 p.m.10 views

CVE-2006-1174

useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the...

6.2AI score
Exploits0References27
OSV
OSV
added 2006/05/28 11:2 p.m.3 views

DEBIAN-CVE-2006-1174

useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the...

3.7CVSS6.5AI score0.00444EPSS
Exploits0References1
Cvelist
Cvelist
added 2006/05/28 11:0 p.m.32 views

CVE-2006-1174

useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the...

6AI score0.00444EPSS
Exploits0References26
Debian CVE
Debian CVE
added 2006/05/28 11:0 p.m.26 views

CVE-2006-1174

useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the...

3.7CVSS4.4AI score0.00444EPSS
Exploits0
myhack58
myhack58
added 2006/05/25 12:0 a.m.61 views

Collateral: the use of tools to crack Foxmail password-vulnerability warning-the black bar safety net

Foxmail in the country has a large number of users due to various reasons, many users need to Foxmail inside of email messages, email account settings, etc. transferred to other E-mail software, or forgot the account password, email password and put your own lock on the door. However, due to the...

7.3AI score
Exploits0
Prion
Prion
added 2006/05/16 10:2 a.m.14 views

Directory traversal

Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the 1 LIST or 2 DELETE IMAP command...

5CVSS6.7AI score0.0239EPSS
Exploits0References10Affected Software1
NVD
NVD
added 2006/05/16 10:2 a.m.22 views

CVE-2006-2414

Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the 1 LIST or 2 DELETE IMAP command...

5CVSS6.4AI score0.0239EPSS
Exploits0References10
OSV
OSV
added 2006/05/16 10:2 a.m.2 views

DEBIAN-CVE-2006-2414

Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the 1 LIST or 2 DELETE IMAP command...

5CVSS6.6AI score0.0239EPSS
Exploits0References1
Cvelist
Cvelist
added 2006/05/16 10:0 a.m.22 views

CVE-2006-2414

Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the 1 LIST or 2 DELETE IMAP command...

6.3AI score0.0239EPSS
Exploits0References10
Debian CVE
Debian CVE
added 2006/05/16 10:0 a.m.57 views

CVE-2006-2414

Directory traversal vulnerability in Dovecot 1.0 beta and 1.0 allows remote attackers to list files and directories under the mbox parent directory and obtain mailbox names via ".." sequences in the 1 LIST or 2 DELETE IMAP command...

5CVSS6.3AI score0.0239EPSS
Exploits0
securityvulns
securityvulns
added 2006/05/13 12:0 a.m.28 views

Dovecot IMAP: Mailbox names list disclosure with mboxes

Giving "1 LIST .. " IMAP command allows the user to see all files and directories under the mbox root's parent directory, so potentially you could see other users' mailbox names. Nothing can be done with them though, so it's not possible to read or modify them. There are also some other less than...

0.2AI score
Exploits0
RedHat Linux
RedHat Linux
added 2006/05/03 4:9 p.m.8 views

security flaw

CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimapmailboxselect command, aka "IMAP injection."...

5CVSS6AI score0.02296EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2006/04/25 2:33 p.m.4 views

security flaw

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

7.5CVSS6.5AI score0.08464EPSS
Exploits0References4
CVE
CVE
added 2006/02/24 12:0 a.m.102 views

CVE-2006-0377

CVE-2006-0377 affects SquirrelMail 1.4.0–1.4.5, enabling CRLF injection in the sqimap_mailbox_select path to inject IMAP commands. The Debian/DSA-988 advisory and related OpenVAS entries confirm this trio of vulnerabilities and note a fixed version (Debian: 1.2.6-5 for old Woody; CentOS/Red Hat a...

5CVSS6.8AI score0.02296EPSS
Exploits1References20Affected Software1
myhack58
myhack58
added 2005/12/20 12:0 a.m.12 views

Split the mailbox in the Annex of the alternative breakthrough of-vulnerability warning-the black bar safety net

Just buy it to hack line of Defense 1 2 period, above a post titled the mailbox in the Annex of the alternative breakthrough of the articles, lake2 beg to differ, proposed to questionable. Oh to In the text the author says the e-mail attachments to exchange the data stream in the form of drawings...

7.1AI score
Exploits0
RedHat Linux
RedHat Linux
added 2005/12/06 2:46 p.m.43 views

Moderate: Red Hat Security Advisory: libc-client security update

Updated libc-client packages that fix a buffer overflow issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. C-client is a common API for accessing mailboxes. A buffer overflow flaw was discovered in the way C-client parses...

7.5CVSS6.4AI score0.08464EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2005/12/06 2:33 p.m.6 views

security flaw

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

7.5CVSS6.5AI score0.08464EPSS
Exploits0References4
Saint
Saint
added 2005/11/29 12:0 a.m.40 views

MailEnable IMAP mailbox name buffer overflow

Added: 11/29/2005 CVE: CVE-2005-3690 BID: 15492 OSVDB: 20929 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem A buffer overflow in the...

7.5CVSS7.5AI score0.05174EPSS
Exploits4
Rows per page
Query Builder