Unauthorized access in OpenVMS POP3 server

It's possible to overwrite local file by specifing it as a log file...

CVE-2002-1066

Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a 1 RETR or 2 DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack...

CVE-2002-1066: Undefined Security Weakness

Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a 1 RETR or 2 DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack...

CVE-2000-0060

CVE-2000-0060 describes a buffer overflow in the aVirt Rover POP3 server 1.1 that allows remote attackers to cause a denial of service by sending a long user name. The vulnerability is network-exploitable (AV:N) with low attack complexity (AC:L), requires no authentication (Au:N), and impacts ava...

CVE-2000-0060

Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name...

CVE-2000-0060: Undefined Security Weakness

Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-2001-1280

Ipswitch IMail POP3 Server 7.04 and earlier is affected by CVE-2001-1280. The vulnerability stems from the POP3 service responding differently to valid versus invalid usernames, enabling remote attackers to enumerate users on the system. Affected component: POP3 service of Ipswitch IMail 7.04 and...

CVE-2001-1280: Undefined Security Weakness

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-2001-0442: Undefined Security Weakness

Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long APOP command...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-2001-0742

Computalynx CMail POP3 server version 2.4.9 is affected by a buffer overflow via a long HELO command, allowing remote code execution. Public references describe CVE-2001-0742 in NVD; Nessus notes a fix for versions

CVE-2001-0742

Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command...

Vulnerabilities in Ipswitch IMail Server 7.04

Hi all, There are a couple of vulnerabilities in Ipswitch IMail Server 7.04. In the POP3 Server If you enter a valid username the reply is: +OK welcome On the other hand, if you enter a username that doesn't exist on the server the reply is: +OK send your password This gives you a way to probe fo...

CVE-2000-1197

CVE-2000-1197 affects POP2/POP3 server (pop3d) in the imap-uw IMAP package on FreeBSD and other OSes. The vulnerability arises from the server creating lock files with predictable names, enabling local users to cause a denial of service by locking other users’ mail boxes (no exploitation details ...

CVE-1999-1190

CVE-1999-1190 describes a buffer overflow in the POP3 server of Admiral Systems EmailClub 1.05. The vulnerability allows remote attackers to execute arbitrary commands by sending an e‑mail with a long 'From' header, taking advantage of a overflow condition in the server’s handling of header data....

CVE-1999-1202

StarTech 1 POP3 proxy server and 2 telnet server allows remote attackers to cause a denial of service via a long USER command...

CVE-1999-1190: Undefined Security Weakness

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message...

Mercury for NetWare POP3 server vulnerable to remote buffer overflow

Hello, All versions of widely-used POP3 server from Mercury MTA package for Netware are vulnerable to remote buffer overflow allowing to crash Netware server: perl -e 'print "APOP " . "a"x2048 . " " . "a"x2048 . "rn"' | nc host 110 Remote execution of malicious code is also theoretically possible...

Проблема в The Bat! (<CR> handling)

Некорректная обработка символов 0x0D CR не закрытых символами 0x0A LF ввода POP3-сервера приводит к тому, что часть письма воспринимается как ответ сервера, что приводит к невозможности получения последующих писем с сервера...