Elm Alternative Folder Buffer Overflow Vulnerability

Binary data 1300.prm...

Elm Mail Client Detection

Binary data 1336.prm...

Mandrake Linux Security Advisory : elm (MDKSA-2001:067)

A buffer overflow exists in the elm email client when handling very long message-ids. This would overwrite other header fields and could potentially cause further damage. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

CVE-2003-0966

Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line...

Important: Red Hat Security Advisory: elm security update

Updated elm packages are now available that fix a buffer overflow vulnerability in the 'frm' command. Elm is a terminal mode email user agent. The frm command is provided as part of the Elm packages and gives a summary list of the sender and subject of selected messages in a mailbox or folder. A...

CVE-2003-1323

Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group via unspecified vectors...

CVE-2003-1324

Race condition in the canopen function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group...

CVE-2001-1174

The CVE-2001-1174 issue affects the Elm email client (Elm 2.5.5 and earlier). The root cause is a buffer overflow when handling very long Message-ID headers, allowing remote attackers to potentially execute arbitrary code. Mandrake/MKSA advisory MDKSA-2001:067 notes that the overflow could overwr...

CVE-2001-1174

Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header...

CVE-2001-1174

Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header...

CVE-1999-1184

CVE-1999-1184 describes a buffer overflow in Elm 2.4 and earlier, allowing local users to gain privileges via a long TERM environment variable. Affected: Elm 2.4 and earlier. Impact per CVSS: partial confidentiality, integrity and availability with local, low complexity, no authentication require...

CVE-1999-1334

CVE-1999-1334 : Multiple buffer overflows in the filter command of Elm 2.4 allow an attacker to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) a long -f (filterfile) command line argument. The connected sources confirm Elm 2.4 as the affected component a...

CVE-1999-1184

Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable...

CVE-1999-1334

Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via 1 long From: headers, 2 long Reply-To: headers, or 3 via a long -f filterfile command line argument...

Elm 2.5.3 - Alternative-Folder Buffer Overflow

Elm 2.5.3 - Alternative-Folder Buffer Overflow // source: https://www.securityfocus.com/bid/2403/info There is a buffer overflow in elm 2.5 PL3. This overflow is accessible by passing a long string to the -f Alternative-Folder command-line option. This vulnerability may not be restricted to this...

Elm 2.5.3 - Alternative-Folder Buffer Overflow

// source: https://www.securityfocus.com/bid/2403/info There is a buffer overflow in elm 2.5 PL3. This overflow is accessible by passing a long string to the -f Alternative-Folder command-line option. This vulnerability may not be restricted to this version of elm. / ------------- elm253-exploit....

Elm Development Group ELM 2.4/2.5.1 Mail for UNIX - ELM Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/1276/info Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. / Elm 2.5 PL3 exploit Tested Under Linux Slackware 3.6, 4.0, 7.0 By xfer [email protected] Of Buffer0verfl0w Security At Sat May 27 18:52:14 CEST 2000 HowTo: Hmmm...

Elm Development Group ELM 2.42.5.1 Mail for UNIX - ELM Buffer Overflow (2)

Elm Development Group ELM 2.42.5.1 Mail for UNIX - ELM Buffer Overflow 2 // source: https://www.securityfocus.com/bid/1276/info Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. / Elm 2.5 PL3 exploit Tested Under Linux Slackware 3.6, 4.0, 7.0 By xfer [email protected] ...

Elm Development Group ELM 2.42.5.1 Mail for UNIX - ELM Buffer Overflow (1)

Elm Development Group ELM 2.42.5.1 Mail for UNIX - ELM Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1276/info // // Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. // / Elm Exploit - Scrippie - Phreak.nl - b0f - http://b0f.freebsd.lublin.pl This exploit...

Elm Development Group ELM 2.4/2.5.1 Mail for UNIX - ELM Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/1276/info // // Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. // / Elm Exploit - Scrippie - Phreak.nl - b0f - http://b0f.freebsd.lublin.pl This exploit spawns an EGID mail shell on the default Slackware 4 install. Use as:...