1688 matches found
osTicket <= 1.2.7 Support Address DoS Vulnerability
The target is running at least one instance of osTicket 1.2.7 or earlier. Such versions are subject to a denial of service attack in open.php if osTicket is configured to receive mails using aliases. Copyright C 2005 George A. Theall Some text descriptions might be excerpted from a referenced...
POP3 Unencrypted Cleartext Login
The remote host is running a POP3 daemon that allows cleartext logins over unencrypted connections. NOTE: Depending on the POP3 server configuration valid credentials needs to be given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from ...
Open WebMail Detection
This script detects whether the target is running Open WebMail and extracts version numbers and locations of any instances found. Open WebMail is a webmail package written in Perl that provides access to mail accounts via POP3 or IMAP. SPDX-FileCopyrightText: 2005 George A. Theall Some text...
Login configurations
Provide the username/password for the common services: HTTP, FTP, NNTP, POP2, POP3, IMAP and SMB NetBios. SPDX-FileCopyrightText: 2005 Georges Dagousset Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
CVE-2004-2520
The CVE-2004-2520 entry affects Gattaca Server 2003, version 1.1.10.0. The vulnerability arises in the POP3 handling where remote authenticated users can trigger a denial of service (application crash) by sending a large numeric value in the LIST, RETR, or UIDL commands. The available documents d...
CVE-2004-2503
INweb Mail Server 2.40 allows remote attackers to cause a denial of service crash via a large number of connect/disconnect actions to the 1 POP3 and 2 SMTP services...
CVE-2004-2520
POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service application crash via a large numeric value in the 1 LIST, 2 RETR, or 3 UIDL commands...
CVE-2004-2520: Undefined Security Weakness
POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service application crash via a large numeric value in the 1 LIST, 2 RETR, or 3 UIDL commands...
CVE-2004-2503: Undefined Security Weakness
INweb Mail Server 2.40 allows remote attackers to cause a denial of service crash via a large number of connect/disconnect actions to the 1 POP3 and 2 SMTP services...
Slackware 10.0 / 10.1 / 8.1 / 9.0 / 9.1 / current : fetchmail (SSA:2005-203-05)
New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. Connecting to a malicious or compromised POP3 server may overflow fetchmail's stack causing a crash or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security...
CVE-2004-2460
CVE-2004-2460 affects gnubiff’s POP3 handling prior to version 2.0.0. The issue allows remote attackers to cause a denial-of-service (application crash) by sending an malformed or intentionally large/“infinite” UIDL list. The underlying root cause is not detailed in the provided documents. The en...
CVE-2004-2461
The vulnerability is in gnubiff’s POP3 handling: a buffer overflow in pop3.c affects gnubiff before 2.0.0. The issue can cause a denial of service (crash) and may allow arbitrary code execution. Connected sources identify the affected component (pop3.c) and the version constraint (before 2.0.0), ...
CVE-2004-2461
Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service crash and possibly execute arbitrary code...
CVE-2004-2460
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service application crash via an "infinite" Unique IDentification Listing UIDL list...
CVE-2004-2461
Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service crash and possibly execute arbitrary code...
CVE-2004-2461: Undefined Security Weakness
Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service crash and possibly execute arbitrary code...
CVE-2004-2460: Undefined Security Weakness
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service application crash via an "infinite" Unique IDentification Listing UIDL list...
CVE-2004-2337
The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials...
CVE-2004-2375
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an APOP USER command with a long second parameter digest...