Advisory: popauth

Hi, there is a symlink problem in the popauth utility, which is part of the qpoper package. The binary is often istalled suid pop and follows symlinks in the -trace file option. This problem has been reported to vendors in June 2001. Impact: in case of suid popauth and valid shell for user pop, t...

CVE-2000-1198

CVE-2000-1198 affects the qpopper POP server. The vulnerability arises from lock files being created with predictable names, enabling a local attacker to cause a denial of service for other users by creating lock files for other mail boxes. The available connected documents describe the issue and...

CVE-2000-1198

qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users lack of mail access by creating lock files for other mail boxes...

PT-2001-1232 · Qpopper · Qpopper

Name of the Vulnerable Software and Affected Versions: qpopper affected versions not specified Description: The qpopper POP server creates lock files with predictable names. This allows local users to cause a denial of service for other users, resulting in a lack of mail access, by creating lock...

Релеинг через poprelayd (message relaying)

Можно обмануть защиту от релеинга через Pop-before-smtp подменив запись в лог-файле...

poprelayd and sendmail relay authentication problem (Cobalt Raq3)

Hi to all, Poprelayd is a simple script that scan /var/log/maillog for valid pop logins and updates a hash db used by sendmail to permit relaying for those valid pop users, this method is called "Pop-before-smtp". The syslog string searched by the script is in this form for the qpop server /POP...

CVE-2000-0989

The CVE-2000-0989 entry describes a buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service. The flaw allows a remote attacker to trigger a denial of service and potentially execute commands by sending a long username. The provided sources confirm the affected component and the basi...

Remote DoS in SmartServer 3

Product: Smart Server 3 by NetCPlus Version: 3.75.x others? Description: There are remote DoS vulnerabilities in both the SMTP and POP components of the SmartServer3 email server. By passing large arguments to commands in both components, the services can be caused to fail. POP3: A large argument...

CVE-2000-0501

MDaemon 2.8.5.0 POP server is affected by a race condition that can cause a denial of service when a UIDL command is issued and the server is exited rapidly. The issue is described as a local DoS with partial availability impact and a low CVSS. No exploitation details are provided in the availabl...

CVE-1999-0759

The CVE-1999-0759 entry concerns FuseMAIL POP service vulnerable to a buffer overflow triggered by long USER and PASS commands. Connected sources confirm the affected component (FuseMAIL POP service) and the root cause (buffer overflow) with CVSS details indicating a high-severity, network-expose...

CVE-1999-0759

Buffer overflow in FuseMAIL POP service via long USER and PASS commands...

CVE-2000-0611

The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service...

CVE-2000-0611

The CVE-2000-0611 entry concerns NetWin dMailWeb and cwMail in default configurations that trust all POP servers. The underlying issue is a trust/bypass of normal authentication, potentially enabling a denial of service. Documents confirm the affected software and the root cause (trust in POP ser...

CVE-1999-1004

CVE-1999-1004 is a buffer overflow in the POP server POProxy used by Norton Anti-Virus NAV2000, triggered by a large USER command. The affected component is the POProxy POP server; underlying cause is a buffer overflow condition. Impact per the entry includes partial availability impact with no c...

CVE-1999-1004

Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command...

University of Washington pop2d 4.46/4.51/4.54/4.55 - Remote File Read

source: https://www.securityfocus.com/bid/1484/info A vulnerability exists in versions of the ipop2d daemon, through version 4.55. ipop2d is part of the University of Washington imap package. Versions through 4.7c of the imap package are affected. Any user who has a pop account on the machine can...

University of Washington pop2d 4.464.514.544.55 - Remote File Read

University of Washington pop2d 4.464.514.544.55 - Remote File Read source: https://www.securityfocus.com/bid/1484/info A vulnerability exists in versions of the ipop2d daemon, through version 4.55. ipop2d is part of the University of Washington imap package. Versions through 4.7c of the imap...

CVE-2000-0399

Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name...

CVE-2000-0034

Netscape 4.7 is affected by CVE-2000-0034: during IMAP/POP sessions, the application records user passwords in the preferences.js file even when “remember passwords” is not enabled. Root cause is password storage in preferences.js, as documented in PT-1999-1842 and echoed in CVE records. Impact i...

CVE-2000-0399

The CVE-2000-0399 entry concerns the MDaemon POP3 server. A buffer overflow in the POP server allows remote attackers to crash the service by sending a too-long user name, resulting in a denial of service. Affected component: MDaemon POP3 server (remote input to user field). Impact: remote DoS wi...