Netscape 4.x6.x Mozilla 0.9.x - Malformed Email POP3 Denial of Service

Netscape 4.x6.x Mozilla 0.9.x - Malformed Email POP3 Denial of Service // source: https://www.securityfocus.com/bid/5002/info The Netscape Communicator and Mozilla browsers include support for email, and the ability to fetch mail through a POP3 server. Both products are available for a range of...

Netscape 4.x/6.x / Mozilla 0.9.x - Malformed Email POP3 Denial of Service

// source: https://www.securityfocus.com/bid/5002/info The Netscape Communicator and Mozilla browsers include support for email, and the ability to fetch mail through a POP3 server. Both products are available for a range of platforms, including Microsoft Windows and Linux. Under some...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-2001-1280

Ipswitch IMail POP3 Server 7.04 and earlier is affected by CVE-2001-1280. The vulnerability stems from the POP3 service responding differently to valid versus invalid usernames, enabling remote attackers to enumerate users on the system. Affected component: POP3 service of Ipswitch IMail 7.04 and...

CVE-2001-0442

The CVE-2001-0442 entry concerns a buffer overflow in the Mercury MTA POP3 server for NetWare 1.48 and earlier. The vulnerability arises from handling a long APOP command, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The available connected source...

CVE-2001-1009

CVE-2001-1009 affects fetchmail (fetchmail-ssl) prior to 5.8.17. Multiple OpenVAS/DSA/Nessus entries describe a memory corruption in the IMAP and POP3 code where unverified input and missing bounds checking can allow a remote attacker—by controlling the server the client connects to—to cause writ...

CVE-2001-1078

CVE-2001-1078 affects eXtremail 1.1.9 and earlier. The vulnerability is a format-string issue in the flog function that can be exploited remotely to gain root privileges by supplying format specifiers through SMTP commands (HELO, EHLO, MAIL FROM, RCPT TO) and via POP3 commands after authenticatio...

CVE-2001-1078

Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands 1 HELO, 2 EHLO, 3 MAIL FROM, or 4 RCPT TO, and the POP3 commands 5 USER and 6 other commands that can be executed after POP3...

CVE-2001-0776

Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service...

CVE-2001-0742

Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-2001-0742

Computalynx CMail POP3 server version 2.4.9 is affected by a buffer overflow via a long HELO command, allowing remote code execution. Public references describe CVE-2001-0742 in NVD; Nessus notes a fix for versions

CVE-2001-0742

Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command...

CVE-2001-0776

Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service...

CVE-2001-0776

The provided documents identify CVE-2001-0776 as a buffer overflow in DynFX MailServer 2.10 that allows remote denial of service via a long username sent to the POP3 service. The vulnerability is caused by an overflow in the POP3 username handling, with the NVD entry listing a MEDIUM base score (...

Vulnerabilities in Ipswitch IMail Server 7.04

Hi all, There are a couple of vulnerabilities in Ipswitch IMail Server 7.04. In the POP3 Server If you enter a valid username the reply is: +OK welcome On the other hand, if you enter a username that doesn't exist on the server the reply is: +OK send your password This gives you a way to probe fo...

CVE-1999-1033

Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang...

CVE-1999-1202

StarTech 1 POP3 proxy server and 2 telnet server allows remote attackers to cause a denial of service via a long USER command...

CVE-1999-1366

CVE-1999-1366 affects Pegasus Mail client (Pegasus e-mail client) 3.0 and earlier. The vulnerability arises from storing POP3 passwords in pmail.ini with weak encryption, allowing local users to decrypt passwords and read e-mail. The provided documents do not include an official fix or remediatio...

CVE-1999-1190

CVE-1999-1190 describes a buffer overflow in the POP3 server of Admiral Systems EmailClub 1.05. The vulnerability allows remote attackers to execute arbitrary commands by sending an e‑mail with a long 'From' header, taking advantage of a overflow condition in the server’s handling of header data....