Directory traversal

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...

CVE-2006-0930

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...

CVE-2006-0930: Undefined Security Weakness

Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. dot dot in the UIDL parameter...

CVE-2004-2520: Undefined Security Weakness

POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service application crash via a large numeric value in the 1 LIST, 2 RETR, or 3 UIDL commands...

CVE-2004-2460

Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service application crash via an "infinite" Unique IDentification Listing UIDL list...

CVE-2004-2460: Undefined Security Weakness

Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service application crash via an "infinite" Unique IDentification Listing UIDL list...

[SECURITY] [DSA 774-1] New fetchmail packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 774-1 [email protected] http://www.debian.org/security/ Martin Schulze August 12th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2335

Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...

CVE-2005-2335

Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...

CVE-2005-2335: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifier for the Fetchmail issue. This is the correct...

DEBIAN-CVE-2004-2460

Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service application crash via an "infinite" Unique IDentification Listing UIDL list...

CVE-2004-2460

Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service application crash via an "infinite" Unique IDentification Listing UIDL list...

[SA12445] gnubiff POP3 Buffer Overflow and Denial of Service Vulnerabilities

TITLE: gnubiff POP3 Buffer Overflow and Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA12445 VERIFY ADVISORY: http://secunia.com/advisories/12445/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: gnubiff 1.x http://secunia.com/product/3867/ DESCRIPTION:...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-2002-1539: Undefined Security Weakness

Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long 1 DELE or 2 UIDL arguments...

CVE-1999-1164

Microsoft Outlook client is affected by CVE-1999-1164, where processing multiple email messages with identical X-UIDL headers can cause the application to hang, resulting in a denial of service. The available documents confirm the DoS impact but do not provide concrete remediation steps or patche...

CVE-1999-1164

Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang...

CVE-1999-1164: Undefined Security Weakness

Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang...

CVE-1999-1500: Undefined Security Weakness

Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service crash via 1 LIST, 2 TOP, or 3 UIDL commands using letters as arguments...