CVE-2001-0742: Undefined Security Weakness

Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command...

CVE-2001-0776: Undefined Security Weakness

Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service...

CVE-1999-1366

CVE-1999-1366 affects Pegasus Mail client (Pegasus e-mail client) 3.0 and earlier. The vulnerability arises from storing POP3 passwords in pmail.ini with weak encryption, allowing local users to decrypt passwords and read e-mail. The provided documents do not include an official fix or remediatio...

CVE-1999-1500

CVE-1999-1500 affects Internet Anywhere POP3 Mail Server 2.3.1. A remote attacker can cause a denial of service (crash) by sending LIST, TOP, or UIDL commands with letters as arguments. No remediation or exploit details are provided in the connected documents; vulnerability impact is limited to a...

CVE-2000-1197

CVE-2000-1197 affects POP2/POP3 server (pop3d) in the imap-uw IMAP package on FreeBSD and other OSes. The vulnerability arises from the server creating lock files with predictable names, enabling local users to cause a denial of service by locking other users’ mail boxes (no exploitation details ...

CVE-1999-1202

CVE-1999-1202 affects StarTech products: (1) POP3 proxy server and (2) a telnet server. The vulnerability allows remote attackers to cause a denial of service by sending an excessively long USER command. The connected documents confirm the affected components and the root cause (long USER command...

CVE-1999-1033

Affected product: Microsoft Outlook Express prior to 4.72.3612.1700. Root cause: parsing of a message containing .. can cause Outlook to re-enter POP3 command mode. Impact: POP3 session hang (partial availability). Evidence: description and records in CVE-1999-1033 family. Remediation: apply patc...

CVE-1999-1202

StarTech 1 POP3 proxy server and 2 telnet server allows remote attackers to cause a denial of service via a long USER command...

CVE-1999-1511

CVE-1999-1511 affects Xtramail 1.11, with buffer overflow issues in multiple services: POP3 PASS, SMTP HELO, and Control Service username. These overflow conditions can crash the service and may allow arbitrary code execution. Nessus plugin entries indicate fixes targeting Xtramail

CVE-1999-1445

Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords...

CVE-1999-1511

Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service crash and possibly execute arbitrary commands via 1 a long PASS command in the POP3 service, 2 a long HELO command in the SMTP service, or 3 a long user name in the Control Service...

CVE-1999-1033

Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang...

CVE-1999-1366

Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail...

CVE-1999-1190

CVE-1999-1190 describes a buffer overflow in the POP3 server of Admiral Systems EmailClub 1.05. The vulnerability allows remote attackers to execute arbitrary commands by sending an e‑mail with a long 'From' header, taking advantage of a overflow condition in the server’s handling of header data....

CVE-1999-1190: Undefined Security Weakness

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message...

CVE-1999-1500: Undefined Security Weakness

Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service crash via 1 LIST, 2 TOP, or 3 UIDL commands using letters as arguments...

CVE-1999-1202: Undefined Security Weakness

StarTech 1 POP3 proxy server and 2 telnet server allows remote attackers to cause a denial of service via a long USER command...

CVE-1999-1033: Undefined Security Weakness

Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang...

CVE-1999-1511: Undefined Security Weakness

Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service crash and possibly execute arbitrary commands via 1 a long PASS command in the POP3 service, 2 a long HELO command in the SMTP service, or 3 a long user name in the Control Service...

HTML Form Protocol Attack

Some HTML browsers can be tricked through the use of HTML forms into sending more or less arbitrary data to any TCP port. This can be used to send commands to servers using ASCII based protocols like SMTP, NNTP, POP3, IMAP, IRC, and probably others. By sending HTML email to unsuspecting users or...