Code injection

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167: Improper Input Validation

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (Metasploit)

$Id: seattlelabpass.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Madirish Webmail 2.01 - baseDir LocalRemote File Inclusion

Madirish Webmail 2.01 - baseDir LocalRemote File Inclusion ===================================================== Madirish Webmail 2.01 basedir RFI/LFI Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

Fetchmail调试模式远程拒绝服务漏洞

BUGTRAQ ID: 39556 Fetchmail是免费的软件包，可以从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传送代理。 在调试模式（-v -v）中，fetchmail会打印从上级服务器（POP3 UIDL列表）或服务器中所检索到消息头所获得的信息。如果打印消息失败，例如信息（消息头）中包含有无效的多字节字符序列，fetchmail会错误的解释这种情况，认为缓冲区过小，并重新分配更大的缓冲区（线性增加缓冲区大小）。如此多次反复后就会导致分配失败，fetchmail会终止。 Eric Raymond...

SuSE 11 Security Update : evolution-data-server (SAT Patch Number 1944)

This update fixes the following vulnerability : evolution considered S/MIME signatures to be valid even for modified mails. CVE-2009-0547: CVSS v2 Base Score: 5.0 Additionally the following bug has been fixed : - A POP3 server sending overly long lines could crash evolution. %NASLMINLEVEL 70300 C...

POP3 Banner Grabber

POP3 Banner Grabber This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'POP3 Banner Grabber', 'Description' = 'POP3 Banner Grabber', 'Author' = 'hdm', 'License' = MSFLICENSE registeroptions...

MDaemon SMTP and IMAP Command Buffer Overflow (CVE-2004-1546)

MDaemon is a Windows-based email server that provides full mail server functionality. MDaemon supports the SMTP, IMAP and POP3 protocols. A vulnerability exists in the way the MDaemon mail server processes certain SMTP and IMAP commands. A stack buffer overflow occurs when an overly long argument...

Eureka Email POP3 Error Stack Buffer Overflow

Added: 02/16/2010 CVE: CVE-2009-3837 OSVDB: 59262 Background Eureka Email is an e-mail client with built-in junk e-mail filtering. Problem A malicious POP3 mail server can send a long error message to the Eureka Email client, causing a stack buffer overflow. Resolution Upgrade when a fix becomes...

Eureka Email POP3 Error Stack Buffer Overflow

Added: 02/16/2010 CVE: CVE-2009-3837 OSVDB: 59262 Background Eureka Email is an e-mail client with built-in junk e-mail filtering. Problem A malicious POP3 mail server can send a long error message to the Eureka Email client, causing a stack buffer overflow. Resolution Upgrade when a fix becomes...

Eureka Email POP3 Error Stack Buffer Overflow

Added: 02/16/2010 CVE: CVE-2009-3837 OSVDB: 59262 Background Eureka Email is an e-mail client with built-in junk e-mail filtering. Problem A malicious POP3 mail server can send a long error message to the Eureka Email client, causing a stack buffer overflow. Resolution Upgrade when a fix becomes...

Eureka Email POP3 Error Stack Buffer Overflow

Added: 02/16/2010 CVE: CVE-2009-3837 OSVDB: 59262 Background Eureka Email is an e-mail client with built-in junk e-mail filtering. Problem A malicious POP3 mail server can send a long error message to the Eureka Email client, causing a stack buffer overflow. Resolution Upgrade when a fix becomes...

Microsoft Outlook 2002 Script Execution (CVE-2004-0121)

Microsoft provides server and client side implementations of email protocols such as SMTP, POP3 and IMAP. The widely used Microsoft Outlook product is an implementation of an email client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and...

Security Best Practice: Protect Yourself from Multiple POP3 Vulnerabilities

Post Office Protocol version 3 POP3 is an electronic mail protocol used to retrieve messages stored in e-mail servers. POP3 is a 'pull' protocol. To check for messages, a client connects to its mail server and using the POP3 protocol, logins to its mailbox and 'pulls' out its messages. POP3 allow...

Eureka Email 2.2q ERR Remote Buffer Overflow Exploit

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'Eureka Email 2.2q ERR Remote Buffer...

Eureka Email 2.2q ERR Remote Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits =========================================================== Eureka Email 2.2q ERR Remote Buffer Overflow Exploit meta =========================================================== Title: Eureka Email 2.2q ERR Remote Buffer Overflow Exploit me...

Eureka Email 2.2q - ERR Remote Buffer Overflow (Metasploit) (1)

Eureka Email 2.2q - ERR Remote Buffer Overflow Metasploit 1 class Metasploit3 'Eureka Email 2.2q ERR Remote Buffer Overflow Exploit', 'Description' = %q This module exploits a buffer overflow in the Eureka Email 2.2q client that is triggered through an excessively long ERR message. , 'Author' =...

Eureka Email 2.2q ERR Remote Buffer Overflow Exploit (meta)

No description provided by source. class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::TcpServer include Msf::Exploit::Egghunter def initializeinfo = superupdateinfoinfo, 'Name' = 'Eureka Email 2.2q ERR Remote Buffer Overflow Exploit', 'Description' = %q This...