Mandrake Linux Security Advisory : pine (MDKSA-2001:047-1)

Versions of the Pine email client prior to 4.33 have various temporary file creation problems, as does the pico editor. These issues allow any user with local system access to cause any files owned by any other user, including root, to potentially be overwritten if the conditions were right. Upda...

Mandrake Linux Security Advisory : elm (MDKSA-2001:067)

A buffer overflow exists in the elm email client when handling very long message-ids. This would overwrite other header fields and could potentially cause further damage. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Mandrake Linux Security Advisory : mutt (MDKSA-2002:002-1)

Joost Pol reported a remotely exploitable buffer overflow in the mutt email client. It is recommended that all mutt users upgrade their packages immediately. Update : The previous packages released for 8.x were unable to recall postponed messages due to an incorrect patch. These new packages also...

SUSE-SA:2002:046: pine

The remote host is missing the patch for the advisory SUSE-SA:2002:046 pine. Pine, Program for Internet News and Email, is a well known and widely used eMail client. While parsing and escaping characters of eMail addresses pine does not allocate enough memory for storing the escaped mailbox part ...

RHEL 2.1 : balsa (RHSA-2003:111)

Updated Balsa packages are available which fix potential vulnerabilities in the IMAP handling code and in libesmtp. Balsa is a GNOME email client which includes code from Mutt. A potential buffer overflow exists in Balsa versions 1.2 and higher when parsing mailbox names returned by an IMAP serve...

CVE-2004-0152

Multiple stack-based buffer overflows in 1 the encodemime function, 2 the encodeuuencode function, 3 or the decodeuuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames...

Outlook/Outlook Express NULL character DoS

Client hangs on POP3 receiving if message contains NULL character...

CVE-2004-0078

Buffer overflow in the index menu code menupadstring of menu.c for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via certain mail messages...

Qualcomm Eudora 5.x/6.0 - Spoofed Attachment Line Denial of Service

source: https://www.securityfocus.com/bid/9026/info A vulnerability has been reported by Qualcomm that may be exploited by a remote attacker to cause the Eudora e-mail client to crash. It has been reported that a malicious email that contains a spoofed attachment converted line will trigger this...

Qualcomm Eudora 5.x6.0 - Spoofed Attachment Line Denial of Service

Qualcomm Eudora 5.x6.0 - Spoofed Attachment Line Denial of Service source: https://www.securityfocus.com/bid/9026/info A vulnerability has been reported by Qualcomm that may be exploited by a remote attacker to cause the Eudora e-mail client to crash. It has been reported that a malicious email...

iDEFENSE Security Advisory 09.10.03: Two Exploitable Overflows in PINE

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 09.10.03: http://www.idefense.com/advisory/09.10.03.txt Two Exploitable Overflows in PINE September 10, 2003 I. BACKGROUND PINE The Program for Internet News & Email is a popular e-mail client shipped with many Linux and Uni...

ImageMagick's Overflow

ImageMagick's Overflow Rosiello Security's Advisory & DTORS http://www.rosiello.org I. BACKGROUND The ImageMagick display is an image viewer. ImageMagick is part of the KDE desktop and is bundled with all major Linux distributions. II. DESCRIPTION A vulnerability was found in this application tha...

Important: Red Hat Security Advisory: balsa security update

Updated Balsa packages are available which fix potential vulnerabilities in the IMAP handling code and in libesmtp. Balsa is a GNOME email client which includes code from Mutt. A potential buffer overflow exists in Balsa versions 1.2 and higher when parsing mailbox names returned by an IMAP serve...

Qualcomm Eudora 5.2.16.0 - File Attachment Spoofing Variant

Qualcomm Eudora 5.2.16.0 - File Attachment Spoofing Variant source: https://www.securityfocus.com/bid/7653/info Eudora is reported to be prone to an issue which may allow attackers to spoof the file extension in an attachment. This may aid an attacker in enticing a user of the e-mail client into...

Qualcomm Eudora 5.2.1/6.0 - File Attachment Spoofing Variant

source: https://www.securityfocus.com/bid/7653/info Eudora is reported to be prone to an issue which may allow attackers to spoof the file extension in an attachment. This may aid an attacker in enticing a user of the e-mail client into executing malicious content. It is possible to refer to othe...

[CLA-2003:630] Conectiva Security Announcement - balsa

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : balsa SUMMARY : Buffer overflow in IMAP code and ...

Important: Red Hat Security Advisory: : Updated balsa and mutt packages fix vulnerabilities

New Balsa, Mutt, and libesmtp packages that fix potential buffer overflow vulnerabilities are now available. Mutt is a text-mode email client. Balsa is a GNOME email client which includes code from Mutt. A potential buffer overflow in Mutt version 1.4 exists when parsing mailbox names returned by...

CVE-2002-0146

CVE-2002-0146 affects fetchmail prior to 5.9.10. The flaw arises when fetching mail over IMAP: fetchmail allocates an array for message sizes based on the server-reported message count but does not validate that count, allowing a remote IMAP server to cause memory overrun/out-of-bounds writes. Ma...

CVE-2003-0140

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...

CVE-2002-2313

Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary programs via an HTML email message containing a META refresh tag that references an embedded .mhtml file with ActiveX controls that execute a second embedded program, which is processed by...