CVE-2000-0060: Undefined Security Weakness

Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name...

Netscape 4.x6.x Mozilla 0.9.x - Malformed Email POP3 Denial of Service

Netscape 4.x6.x Mozilla 0.9.x - Malformed Email POP3 Denial of Service // source: https://www.securityfocus.com/bid/5002/info The Netscape Communicator and Mozilla browsers include support for email, and the ability to fetch mail through a POP3 server. Both products are available for a range of...

Netscape 4.x/6.x / Mozilla 0.9.x - Malformed Email POP3 Denial of Service

// source: https://www.securityfocus.com/bid/5002/info The Netscape Communicator and Mozilla browsers include support for email, and the ability to fetch mail through a POP3 server. Both products are available for a range of platforms, including Microsoft Windows and Linux. Under some...

CVE-2001-1280

Ipswitch IMail POP3 Server 7.04 and earlier is affected by CVE-2001-1280. The vulnerability stems from the POP3 service responding differently to valid versus invalid usernames, enabling remote attackers to enumerate users on the system. Affected component: POP3 service of Ipswitch IMail 7.04 and...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-2001-1280: Undefined Security Weakness

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-2001-0442

The CVE-2001-0442 entry concerns a buffer overflow in the Mercury MTA POP3 server for NetWare 1.48 and earlier. The vulnerability arises from handling a long APOP command, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The available connected source...

CVE-2001-0442: Undefined Security Weakness

Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long APOP command...

CVE-2001-1078

CVE-2001-1078 affects eXtremail 1.1.9 and earlier. The vulnerability is a format-string issue in the flog function that can be exploited remotely to gain root privileges by supplying format specifiers through SMTP commands (HELO, EHLO, MAIL FROM, RCPT TO) and via POP3 commands after authenticatio...

CVE-2001-1078

Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands 1 HELO, 2 EHLO, 3 MAIL FROM, or 4 RCPT TO, and the POP3 commands 5 USER and 6 other commands that can be executed after POP3...

CVE-2001-1009

CVE-2001-1009 affects fetchmail (fetchmail-ssl) prior to 5.8.17. Multiple OpenVAS/DSA/Nessus entries describe a memory corruption in the IMAP and POP3 code where unverified input and missing bounds checking can allow a remote attacker—by controlling the server the client connects to—to cause writ...

CVE-2001-1078: Undefined Security Weakness

Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands 1 HELO, 2 EHLO, 3 MAIL FROM, or 4 RCPT TO, and the POP3 commands 5 USER and 6 other commands that can be executed after POP3...

CVE-2001-0742

Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command...

CVE-2001-0776

Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service...

CVE-2001-0742

Computalynx CMail POP3 server version 2.4.9 is affected by a buffer overflow via a long HELO command, allowing remote code execution. Public references describe CVE-2001-0742 in NVD; Nessus notes a fix for versions

CVE-2001-0776

The provided documents identify CVE-2001-0776 as a buffer overflow in DynFX MailServer 2.10 that allows remote denial of service via a long username sent to the POP3 service. The vulnerability is caused by an overflow in the POP3 username handling, with the NVD entry listing a MEDIUM base score (...

CVE-2001-0742

Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command...

CVE-2001-0776

Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

Vulnerabilities in Ipswitch IMail Server 7.04

Hi all, There are a couple of vulnerabilities in Ipswitch IMail Server 7.04. In the POP3 Server If you enter a valid username the reply is: +OK welcome On the other hand, if you enter a username that doesn't exist on the server the reply is: +OK send your password This gives you a way to probe fo...