1688 matches found
CVE-2004-2337
The CVE-2004-2337 entry concerns the file /.inlook/.crypt in inlook 0.7.3 and earlier, which is installed with world readable permissions. This allows local users to access POP3 credentials stored by the application. The root cause is improper permissions on the .crypt file, leading to confidenti...
CVE-2004-2375
Vulnerability CVE-2004-2375 affects the POP3 server in 1st Class Mail Server 4.0. A buffer overflow can be triggered by an APOP USER command with an excessively long second parameter (digest), potentially causing a denial of service and possibly allowing arbitrary code execution. Documented in CV...
CVE-2004-2375: Undefined Security Weakness
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an APOP USER command with a long second parameter digest...
CVE-2004-2337: Undefined Security Weakness
The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials...
CVE-2004-2378: Undefined Security Weakness
@Mail 3.64 for Windows allows remote attackers to cause a denial of service "unusable" server via a large number of POP3 connections to the server...
[SECURITY] [DSA 774-1] New fetchmail packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 774-1 [email protected] http://www.debian.org/security/ Martin Schulze August 12th, 2005 http://www.debian.org/security/faq -...
DSA-774-1 fetchmail - buffer overflow
Bulletin has no description...
FreeBSD : fetchmail -- denial of service/crash from malicious POP3 server (3f4ac724-fa8b-11d9-afcf-0060084a00e5)
In fetchmail 6.2.5.1, the remote code injection via POP3 UIDL was fixed, but a denial of service attack was introduced : Two possible NULL pointer dereferences allow a malicious POP3 server to crash fetchmail by respondig with UID lines containing only the article number but no UID in violation o...
FreeBSD : fetchmail -- remote root/code injection from malicious POP3 server (3497d7be-2fef-45f4-8162-9063751b573a)
fetchmail's POP3/UIDL code does not truncate received UIDs properly. A malicious or compromised POP3 server can thus corrupt fetchmail's stack and inject code when fetchmail is using UIDL, either through configuration, or as a result of certain server capabilities. Note that fetchmail is run as...
GLSA-200507-21 : fetchmail: Buffer Overflow
The remote host is affected by the vulnerability described in GLSA-200507-21 fetchmail: Buffer Overflow fetchmail does not properly validate UIDs coming from a POP3 mail server. The UID is placed in a fixed length buffer on the stack, which can be overflown. Impact : Very long UIDs returned from ...
CVE-2005-2335
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...
CVE-2005-2335
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...
CVE-2005-2335
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...
CVE-2005-2335
CVE-2005-2335: Buffer overflow in fetchmail's POP3 client (UIDL handling) allows a remote POP3 server to crash fetchmail or potentially execute arbitrary code. Affects fetchmail prior to the patched release. Remediation involves upgrading to the fixed fetchmail version (e.g., 6.2.5.2 per the init...
CVE-2005-2335
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...
CVE-2005-2335
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...
CVE-2005-2335: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...
fetchmail, fetchmailconf security update
CentOS Errata and Security Advisory CESA-2005:640-01 Updated fetchmail packages that fix a security flaw are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Fetchmail is a remote mail retrieval and forwarding utility. A buffer...
fetchmail security update
CentOS Errata and Security Advisory CESA-2005:640 Updated fetchmail packages that fix a security flaw are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Fetchmail is a remote mail retrieval and forwarding utility. A buffer...
Important: Red Hat Security Advisory: fetchmail security update
Updated fetchmail packages that fix a security flaw are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Fetchmail is a remote mail retrieval and forwarding utility. A buffer overflow was discovered in fetchmail's POP3 client. A...