1843 matches found
CVE-2001-1009
Fetchmail aka fetchmail-ssl before 5.8.17 allows a remote malicious 1 IMAP server or 2 POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request...
CVE-2001-1009
CVE-2001-1009 affects fetchmail (fetchmail-ssl) prior to 5.8.17. Multiple OpenVAS/DSA/Nessus entries describe a memory corruption in the IMAP and POP3 code where unverified input and missing bounds checking can allow a remote attacker—by controlling the server the client connects to—to cause writ...
CVE-2002-0002
Format string vulnerability in stunnel before 3.22 when used in client mode for 1 smtp, 2 pop, or 3 nntp allows remote malicious servers to execute arbitrary code...
Addendum Re: Internet Explorer Pop-Up OBJECT Tag Bug
Pop-Up Bug Notes First, adding an addendum about the bug which Dave Ahmad discovered: This can be used with the window object as well, when setting the document body's innerHTML property and using method "window.open". This information has been forwarded to the vendor. Secondly, there are a numbe...
Stunnel: Format String Bug in versions <3.22
Don't know why this didn't get approved when I submitted it last week, but here goes again... Release Date: 2001-Dec-22 Package: stunnel Versions: stunnel-3.3 = stunnel-3.21c Problem type: format string bugs Exploit script: none currently known Severity: high Network-accessible: yes Discovery:...
Advisory: popauth
Hi, there is a symlink problem in the popauth utility, which is part of the qpoper package. The binary is often istalled suid pop and follows symlinks in the -trace file option. This problem has been reported to vendors in June 2001. Impact: in case of suid popauth and valid shell for user pop, t...
CVE-2000-1198
CVE-2000-1198 affects the qpopper POP server. The vulnerability arises from lock files being created with predictable names, enabling a local attacker to cause a denial of service for other users by creating lock files for other mail boxes. The available connected documents describe the issue and...
CVE-2000-1198
qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users lack of mail access by creating lock files for other mail boxes...
PT-2001-1232 · Qpopper · Qpopper
Name of the Vulnerable Software and Affected Versions: qpopper affected versions not specified Description: The qpopper POP server creates lock files with predictable names. This allows local users to cause a denial of service for other users, resulting in a lack of mail access, by creating lock...
poprelayd and sendmail relay authentication problem (Cobalt Raq3)
Hi to all, Poprelayd is a simple script that scan /var/log/maillog for valid pop logins and updates a hash db used by sendmail to permit relaying for those valid pop users, this method is called "Pop-before-smtp". The syslog string searched by the script is in this form for the qpop server /POP...
Релеинг через poprelayd (message relaying)
Можно обмануть защиту от релеинга через Pop-before-smtp подменив запись в лог-файле...
CVE-2000-0989
The CVE-2000-0989 entry describes a buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service. The flaw allows a remote attacker to trigger a denial of service and potentially execute commands by sending a long username. The provided sources confirm the affected component and the basi...
Remote DoS in SmartServer 3
Product: Smart Server 3 by NetCPlus Version: 3.75.x others? Description: There are remote DoS vulnerabilities in both the SMTP and POP components of the SmartServer3 email server. By passing large arguments to commands in both components, the services can be caused to fail. POP3: A large argument...
CVE-1999-0759
The CVE-1999-0759 entry concerns FuseMAIL POP service vulnerable to a buffer overflow triggered by long USER and PASS commands. Connected sources confirm the affected component (FuseMAIL POP service) and the root cause (buffer overflow) with CVSS details indicating a high-severity, network-expose...
CVE-2000-0501
MDaemon 2.8.5.0 POP server is affected by a race condition that can cause a denial of service when a UIDL command is issued and the server is exited rapidly. The issue is described as a local DoS with partial availability impact and a low CVSS. No exploitation details are provided in the availabl...
CVE-1999-0759
Buffer overflow in FuseMAIL POP service via long USER and PASS commands...
CVE-1999-1004
CVE-1999-1004 is a buffer overflow in the POP server POProxy used by Norton Anti-Virus NAV2000, triggered by a large USER command. The affected component is the POProxy POP server; underlying cause is a buffer overflow condition. Impact per the entry includes partial availability impact with no c...
CVE-2000-0611
The CVE-2000-0611 entry concerns NetWin dMailWeb and cwMail in default configurations that trust all POP servers. The underlying issue is a trust/bypass of normal authentication, potentially enabling a denial of service. Documents confirm the affected software and the root cause (trust in POP ser...