Courier-IMAP <= 3.0.2-r1 auth_debug() Remote Format String Exploit

Exploit for bsd platform in category remote exploits ================================================================== Courier-IMAP = 3.0.2-r1 authdebug Remote Format String Exploit ================================================================== / courier-imap = 3.0.2-r1 Remote Format String...

Courier-IMAP 3.0.2-r1 - 'auth_debug()' Remote Format String

/ courier-imap = 3.0.2-r1 Remote Format String Vulnerability exploit Author: ktha at hush dot com Tested on FreeBSD 4.10-RELEASE with courier-imap-3.0.2 Special thanks goes to andrewg for providing the FreeBSD box. Greetings: all the guys from irc pulltheplug com and irc netric org bash-2.05b$...

CVE-2002-1311

CVE-2002-1311 affects Courier sqwebmail prior to 0.40.0, where the process does not promptly drop privileges after startup in certain scenarios, potentially enabling local users to read arbitrary files. Public sources (NVD, Debian DSA-197, OSV, OpenVAS) corroborate a local-privilege-usage vector ...

CVE-2002-1311

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files...

CVE-2002-1311

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files...

CVE-2003-0040

SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name...

CVE-2003-0040

The CVE-2003-0040 entry concerns SQL injection in the courier mail server (courier 0.40 and earlier) via the PostgreSQL auth module. A remote attacker could inject SQL through the username, exploiting insufficient input sanitization in the authentication path. This is supported by multiple source...

CVE-2003-0040

SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name...

CVE-2002-1311: Undefined Security Weakness

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files...

CVE-2003-0040: Undefined Security Weakness

SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name...

GLSA-200408-02 : Courier: XSS vulnerability in SqWebMail

The remote host is affected by the vulnerability described in GLSA-200408-02 Courier: XSS vulnerability in SqWebMail Luca Legato found that SqWebMail is vulnerable to a cross-site scripting XSS attack. An XSS attack allows an attacker to insert malicious code into a web-based application. SqWebMa...

GLSA-200403-06 : Multiple remote buffer overflow vulnerabilities in Courier

The remote host is affected by the vulnerability described in GLSA-200403-06 Multiple remote buffer overflow vulnerabilities in Courier The vulnerabilities have been found in the 'SHIFTJIS' converter in 'shiftjis.c' and 'ISO2022JP' converter in 'so2022jp.c'. An attacker may supply Unicode...

FreeBSD : courier-imap -- format string vulnerability in debug mode (26)

The following package needs to be updated: courier-imap %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg616cf823f48b11d89837000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

Courier < 0.45 Japanese Codeset Conversion Overflows

Binary data 1206.prm...

Courier IMAP Server < 3.0.7 Multiple Vulnerabilities

Binary data 1210.prm...

CVE-2004-0777

CVE-2004-0777 is a format-string vulnerability in Courier-IMAP’s auth_debug function that can be triggered when DEBUG_LOGIN is enabled. Affected versions include Courier-IMAP 1.6.0–2.2.1 and 3.x–3.0.3. The issue allows remote code execution by supplying crafted input (username/password) containin...

CVE-2004-0777

Format string vulnerability in the authdebug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging DEBUGLOGIN is enabled, allows remote attackers to execute arbitrary code...

CVE-2004-0777

Format string vulnerability in the authdebug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging DEBUGLOGIN is enabled, allows remote attackers to execute arbitrary code...

CVE-2004-0777: Use of Externally-Controlled Format String

Format string vulnerability in the authdebug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging DEBUGLOGIN is enabled, allows remote attackers to execute arbitrary code...

[Full-Disclosure] iDEFENSE Security Advisory 08.18.04: Courier-IMAP Remote Format String Vulnerability

Courier-IMAP Remote Format String Vulnerability iDEFENSE Security Advisory 08.18.04 www.idefense.com/application/poi/display?id=131&type=vulnerabilities August 18, 2004 I. BACKGROUND Courier-IMAP is an IMAP/POP3 mail server popular on sites utilizing Qmail/Exim/Postfix. More information is...