293 matches found
Fedora Core 10 FEDORA-2009-9428 (cyrus-imapd)
The remote host is missing an update to cyrus-imapd announced via advisory FEDORA-2009-9428. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...
Fedora Core 10 FEDORA-2009-9428 (cyrus-imapd)
The remote host is missing an update to cyrus-imapd announced via advisory FEDORA-2009-9428. OpenVAS Vulnerability Test $Id: fcore20099428.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9428 cyrus-imapd Authors: Thomas Reinke Copyright: Copyright c...
Mandrake Security Advisory MDVSA-2009:229 (cyrus-imapd)
The remote host is missing an update to cyrus-imapd announced via advisory MDVSA-2009:229. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
FreeBSD Ports: cyrus-imapd
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Fedora Core 11 FEDORA-2009-9417 (cyrus-imapd)
The remote host is missing an update to cyrus-imapd announced via advisory FEDORA-2009-9417. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...
Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2009:229-1)
A vulnerability has been found and corrected in cyrus-imapd : Buffer overflow in the SIEVE script component sieve/script.c in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14 allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related t...
Cyrus IMAP Server SIEVE脚本栈溢出漏洞
BUGTRAQ ID: 36296 Cyrus IMAP Server是一款免费开放源代码IMAP协议实现,可使用在Unix和Linux操作系统下。 cyrus-imapd的SIEVE组件在处理SIEVE脚本时没有正确地使用sizeof运算符。攻击者可以向snprintf调用传送负数的长度,由于整数转换这会生成很大的正数值,触发栈溢出。成功利用这个漏洞的攻击者可以将其权限提升到cyrus系统用户,因此能够向服务器安装SIEVE 脚本的用户可以读取和修改系统上的任意邮件消息。 cyrus IMAPd 2.2.13 厂商补丁: cyrus -----...
[SECURITY] Fedora 10 Update: cyrus-imapd-2.3.14-2.fc10
The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...
Fedora 11 : cyrus-imapd-2.3.14-2.fc11 (2009-9417)
fixes buffer overflow in SIEVE script handling Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Cyrus IMAPd buffer overflow vulnerability
Overview The Cyrus IMAP server contains a vulnerability that may allow an authenticated attacker to execute code. Description The Cyrus IMAP mail server supports the SIEVE mail filtering language. Cyrus IMAP versions 2.2 through 2.3.14 contain a buffer overflow vulnerability that may be triggered...
Integer overflow
Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...
DEBIAN-CVE-2009-2632
Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...
CVE-2009-2632
Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...
CVE-2009-2632
Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...
CVE-2009-2632
Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...
CVE-2009-2632
CVE-2009-2632: A local buffer overflow in the Sieve component (sieve/script.c) of Cyrus IMAP Server 2.2.13 and 2.3.14, and in Dovecot up to 1.0.4/1.1.7, arises from improper handling of buffer length using sizeof coupled with an integer signedness error. This can allow a local attacker to read/mo...
CVE-2009-2632
Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...
CVE-2009-2632
Buffer overflow in the SIEVE script component sieve/script.c, as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to...