CVE-2000-1197

CVE-2000-1197 affects POP2/POP3 server (pop3d) in the imap-uw IMAP package on FreeBSD and other OSes. The vulnerability arises from the server creating lock files with predictable names, enabling local users to cause a denial of service by locking other users’ mail boxes (no exploitation details ...

CVE-1999-1190

CVE-1999-1190 describes a buffer overflow in the POP3 server of Admiral Systems EmailClub 1.05. The vulnerability allows remote attackers to execute arbitrary commands by sending an e‑mail with a long 'From' header, taking advantage of a overflow condition in the server’s handling of header data....

Mercury for NetWare POP3 server vulnerable to remote buffer overflow

Hello, All versions of widely-used POP3 server from Mercury MTA package for Netware are vulnerable to remote buffer overflow allowing to crash Netware server: perl -e 'print "APOP " . "a"x2048 . " " . "a"x2048 . "rn"' | nc host 110 Remote execution of malicious code is also theoretically possible...

Rit Research Labs The Bat! 1.x - Missing Linefeeds Denial of Service

Rit Research Labs The Bat! 1.x - Missing Linefeeds Denial of Service source: https://www.securityfocus.com/bid/2636/info "The Bat!" is an MUA for Windows by Rit Research Labs. "The Bat!" is vulnerable to a remote denial of service attack. Email messages in which carriage return CR characters are...

Проблема в The Bat! (<CR> handling)

Некорректная обработка символов 0x0D CR не закрытых символами 0x0A LF ввода POP3-сервера приводит к тому, что часть письма воспринимается как ответ сервера, что приводит к невозможности получения последующих писем с сервера...

CVE-2000-0960

The vulnerability CVE-2000-0960 affects Netscape Messaging Server 4.15p1: the POP3 server exposes user enumeration by returning different error messages for incorrect usernames versus incorrect passwords, enabling an attacker to determine valid accounts and harvest email addresses. The connected ...

CVE-2000-0960

The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse...

CVE-2000-1237

The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing...

CVE-2000-0841

Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command...

CVE-2000-0840

Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command...

CVE-2000-0840

XMail POP3 server (versions before 0.59) is vulnerable to a buffer overflow triggered by a long USER argument. The issue can allow an attacker to remotely execute commands on the affected host, with reports indicating possible code execution as root. The vulnerability is tied to the APOP/USER han...

CVE-2000-0841

Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command...

CVE-2000-0840

Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command...

True North Software Internet Anywhere Mail Server 3.1.3 - RETR Denial of Service

source: https://www.securityfocus.com/bid/982/info Submitting a RETR command with a message ID argument longer than 10 numeric characters will result in a crash of the Internet Anywhere Mail Server. A Doctor Watson error message will appear reporting an access violation by MailServer.exe...

roverpop3.dos.txt

Local / Remote Remote DoS Attack in Rover POP3 Server V1.1 NT From aVirt USSR Advisory Code: USSR-99025 Release Date: December 27, 1999 1/5 Systems Affected: Rover POP3 Server V1.1 NT and possibly others versions. About The Software: Rover POP3 Server V1.1 NT From aVirt, is a full-featured...

CVE-2000-0060

Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name...

pakmail.txt

Vulnerable Program: PakMail v1.25 SMTP/POP3 Server Platform : Windows95, 98, NT Vendor : SilverSoft Corporation www.pak.net Impact : Remote/local users can DoS both STMP & POP3 servers Found by : slackee [email protected] Date : 5th December '99 PakMail SMTP/POP3 Server Pakmail V1.25, a sta...

Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow

Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/801/info Certain versions of EmailClub, a mail server package by Admiral Systems Inc. are vulnerable to a remote buffer overflow. This overflow is exploitable via EmailClub's POP3 server which...

Admiral Systems EmailClub 1.0.0.5 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/801/info Certain versions of EmailClub, a mail server package by Admiral Systems Inc. are vulnerable to a remote buffer overflow. This overflow is exploitable via EmailClub's POP3 server which fails to perform proper bounds checking on the 'From:' head...

NetCPlus SmartServer3 POP3 (NCPOPSERV.EXE) USER Command Remote Overflow

The remote pop3 server seems vulnerable to a buffer overflow when issued a very long command. This may allow an attacker to execute arbitrary commands as root on the remote POP3 server. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: doma...