436 matches found
CVE-2005-0198
A logic error in the CRAM-MD5 code for the University of Washington IMAP UW-IMAP server, when Challenge-Response Authentication Mechanism with MD5 CRAM-MD5 is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticat...
KLA10294 WLF vulnerability in Pine
A race condition was found in Pine. By exploiting this vulnerability malicious users can overwrite arbitrary files. This vulnerability can be exploited locally via a symlink attack. Original advisories - Exploitation Related products Pine CVE list CVE-2005-1066 warning Solution Update to latest...
security flaw
A logic error in the CRAM-MD5 code for the University of Washington IMAP UW-IMAP server, when Challenge-Response Authentication Mechanism with MD5 CRAM-MD5 is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticat...
CVE-2005-0198
The CVE-2005-0198 entry corresponds to a logic error in the CRAM-MD5 authentication path of UW-IMAP/imap servers, allowing remote attackers to authenticate as arbitrary users when CRAM-MD5 is enabled. Multiple connected advisories (Debian OSV, Gentoo/OpenVAS, SuSE/NT) describe the same issue and ...
CVE-2005-0198: Undefined Security Weakness
A logic error in the CRAM-MD5 code for the University of Washington IMAP UW-IMAP server, when Challenge-Response Authentication Mechanism with MD5 CRAM-MD5 is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticat...
Important: Red Hat Security Advisory: pine security update
Updated Pine packages that resolve remotely exploitable security issues are now available. Pine, developed at the University of Washington, is a tool for reading, sending, and managing electronic messages including mail and news. A buffer overflow exists in the way unpatched versions of Pine prio...
CVE-2002-0379
CVE-2002-0379 describes a buffer overflow in the University of Washington UW-IMAPd server (uw-imapd) for imap-2001/imapd 2001.315 and imap-2001a/imapd 2001.315, and imapd 2000.287 and earlier, when handling legacy RFC 1730 BODY requests. The vulnerability allows a remote authenticated user to exe...
CVE-2002-0379
Buffer overflow in University of Washington imap server uw-imapd imap-2001 imapd 2001.315 and imap-2001a imapd 2001.315 with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request...
CVE-2002-0379: Undefined Security Weakness
Buffer overflow in University of Washington imap server uw-imapd imap-2001 imapd 2001.315 and imap-2001a imapd 2001.315 with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request...
CVE-2002-1782
The default configuration of University of Washington IMAP daemon wu-imapd, when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user...
CVE-2002-1782
The default configuration of University of Washington IMAP daemon wu-imapd, when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user...
University of Washington IMAP Server vulnerable to buffer overflow after login
Overview A buffer overflow vulnerability exists in versions of the University of Washington IMAP Server up to and including the imap-2002 release. This vulnerability may allow an authenticated attacker to execute arbitrary code on the mail server with the privileges of the UID of the user running...
University of Washington imap Server (uw-imapd) BODY Request Remote Overflow
The remote version of UW-IMAP is vulnerable to a buffer overflow condition that could allow an authenticated attacker to execute arbitrary code on the remote host with the privileges of the IMAP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
CVE-2001-0691
Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations...
CVE-2001-0691
UW-IMAP imapd (Washington University) v2000a–2000c contains buffer overflows that could allow a local user, after authentication, to execute code with that user’s privileges in certain configurations. Mandrake MDKSA-2001:054 notes these vulnerabilities and that updates are provided, but the exact...
CVE-2001-0691: Undefined Security Weakness
Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations...
CVE-2000-0847
Buffer overflow in University of Washington c-client library used by pine and other programs allows remote attackers to execute arbitrary commands via a long X-Keywords header...
pico Text Editor Symbolic Link Vulnerability : ERROR CORRECTION
The previous submission stated that the vendor of pico is Washington University. This was an error. Of course it sould said University of Washington. The vendor we've for the vulnerability contacted was University of Washington. Below is the correct message. -----BEGIN PGP SIGNED MESSAGE----- Has...
University of Washington Pico 3.x4.x - File Overwrite
University of Washington Pico 3.x4.x - File Overwrite source: https://www.securityfocus.com/bid/2097/info A vulnerability exists in several versions of University of Washington's Pico, a widely-distributed text editor shipped with most versions of Linux / Unix. Under very specific circumstances, ...