8 matches found
SUSE CVE-2011-3372
imap/nntpd.c in the NNTP server nntpd for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command...
NNTP Login Utility
This module attempts to authenticate to NNTP services which support the AUTHINFO authentication extension. This module supports AUTHINFO USER/PASS authentication, but does not support AUTHINFO GENERIC or AUTHINFO SASL authentication methods. This module requires Metasploit:...
inn -- plaintext command injection into encrypted channel
INN developers report: Fixed a possible plaintext command injection during the negotiation of a TLS layer. The vulnerability detailed in CVE-2011-0411 affects the STARTTLS and AUTHINFO SASL commands. nnrpd now resets its read buffer upon a successful negotiation of a TLS layer. It prevents...
CVE-2011-3372
imap/nntpd.c in the NNTP server nntpd for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command...
CVE-2011-3372: Improper Authentication
imap/nntpd.c in the NNTP server nntpd for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command...
PT-2011-4412
Name of the Vulnerable Software and Affected Versions Cyrus IMAPd versions 2.4.x through 2.4.11 Description The issue allows remote attackers to bypass authentication in the NNTP server nntpd by sending an AUTHINFO USER command without an additional AUTHINFO PASS command. Recommendations For Cyru...
CVE-2005-2990
CVE-2005-2990 affects the LineContol Java Client (jlc) component, where the AuthInfo.java code path in versions before 0.8.1 logs sensitive data such as user passwords. The documented impact is partial confidentiality loss. No exploitation details are provided in the sources; no explicit remediat...
