1688 matches found
Buffer overflow
Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service daemon crash and probably execute arbitrary code via a long USER command...
CVE-2007-4646: Improper Control of Generation of Code
Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service daemon crash and probably execute arbitrary code via a long USER command...
Hexamail Server 3.0.0.001 (pop3) pre-auth Remote Overflow PoC
No description provided by source. ?php / Hexamail Server 3.0.0.001 pop3 pre-auth remote overflow poc by rgod http://retrogod.altervista.org tested against the Lite one this one crashes the entire server you are in control of eax and ecx, I think arbitrary code execution is possible but a little...
FreeBSD : claws-mail -- POP3 Format String Vulnerability (d9867f50-54d0-11dc-b80b-0016179b2dd5)
A Secunia Advisory reports : A format string error in the 'incputerror' function in src/inc.c when displaying a POP3 server's error response can be exploited via specially crafted POP3 server replies containing format specifiers. Successful exploitation may allow execution of arbitrary code, but...
Sylpheed和Sylpheed-Claws POP3远程格式串处理漏洞
BUGTRAQ ID: 25430 CVECAN ID: CVE-2007-2958 Sylpheed和Sylpheed-Claws都是轻型的邮件客户端。 Sylpheed和Sylpheed-Claws在处理用户请求存在格式串处理漏洞，远程攻击者可能利用此漏洞控制客户端。 Sylpheed和Sylpheed-Claws邮件客户端的src/inc.c文件中的incputerror函数在显示POP3服务器的错误响应时存在格式串漏洞处理，如果用户受骗连接到了恶意的POP3服务器并接收到包含有格式标识符的回复的话，就可能触发这个漏洞，导致执行任意指令。 Sylpheed Sylpheed 2.4...
Format string
Format string vulnerability in the incputerror function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws Claws Mail 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies...
CVE-2007-2958
Format string vulnerability in the incputerror function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws Claws Mail 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies...
CVE-2007-2958
Format string vulnerability in the incputerror function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws Claws Mail 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies...
CVE-2007-2958
CVE-2007-2958 affects Sylpheed 2.4.4 and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0. The vulnerability is a format string issue in inc_put_error (src/inc.c) that can be triggered by crafted POP3 replies from a remote server, allowing arbitrary code execution. Public references and OpenVAS ent...
CVE-2007-2958
Format string vulnerability in the incputerror function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws Claws Mail 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies...
CVE-2007-2958
Format string vulnerability in the incputerror function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws Claws Mail 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies...
claws-mail -- POP3 Format String Vulnerability
A Secunia Advisory reports: A format string error in the "incputerror" function in src/inc.c when displaying a POP3 server's error response can be exploited via specially crafted POP3 server replies containing format specifiers. Successful exploitation may allow execution of arbitrary code, but...
[SECURITY] Fedora Core 6 Update: dovecot-1.0.3-6.fc6
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...
MDKA-2007:083 : imap
Due to the configuration of the xinetd configuration files included in the imap package, initial connections to the IMAP and/or POP3 services would have a substantial delay due to xinetd attempting to perform ident lookups. This update has corrected xinetd configuration files that remove the iden...
CVE-2007-4242
The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...
CVE-2007-4242
CVE-2007-4242 affects the Pop3 Proxy in Astaro Security Gateway (ASG) 7 . The issue is that attachments exceeding the maximum allowed size are not scanned for viruses and are passed through, enabling a bypass of virus scanning. The connected documents confirm the affected component and the root c...
CVE-2007-4242
The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...
[SECURITY] Fedora 7 Update: dovecot-1.0.3-14.fc7
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...
CVE-2007-4242: Undefined Security Weakness
The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...