[Full-Disclosure] iDEFENSE Security Advisory 08.24.04: CDE Mailer argv[0] Format String Vulnerability

CDE Mailer argv0 Format String Vulnerability iDEFENSE Security Advisory 08.24.04 www.idefense.com/application/poi/display?id=132&type=vulnerabilities August 24, 2004 I. BACKGROUND CDE Mailer dtmail is the mail user agent MUA for CDE, which is installed on Solaris 8 and 9 by default. It provides a...

Sun Solaris dtmail contains a format string vulnerability

Overview A vulnerability in the way dtmail handles command-line arguments could allow an attacker to execute arbitrary code. Description The dtmail program is a mail user agent MUA for the Common Desktop Environment CDE. It provides a graphical user interface for reading, sending, and managing...

FreeBSD : courier-imap -- format string vulnerability in debug mode (26)

The following package needs to be updated: courier-imap %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg616cf823f48b11d89837000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

CVE-2003-1051

CVE-2003-1051 affects IBM DB2 Universal Database 8.1. It describes multiple format-string vulnerabilities that could allow local users to execute arbitrary code via certain command-line arguments to db2start, db2stop, or db2govd. Root cause: format string handling issues in the involved binaries....

AOL Instant Messenger Filename Handling Format String

Binary data 1254.prm...

Mutt < 1.4.1 / 1.5 IMAP Server Format String Vulnerability

Binary data 1298.prm...

XChat Malformed Nickname Remote Format String

Binary data 1873.prm...

ProFTPD cwd Command Format String

Binary data 1818.prm...

XMail < 2.4 (Build 0530) APOP Remote Format String

Binary data 1801.prm...

bftpd < 1.0.13 Format String Overflow

Binary data 1829.prm...

McAfee ePolicy Orchestrator Remote Format String

Binary data 1895.prm...

Dropbear SSH Server Format String (deprecated)

Binary data 1993.prm...

tanned < 0.7.2 Remote Format String

Binary data 1889.prm...

BitchX IRC Client "/INVITE" Command Format String DoS

Binary data 1855.prm...

CVE-2004-0777

Format string vulnerability in the authdebug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging DEBUGLOGIN is enabled, allows remote attackers to execute arbitrary code...

CVE-2004-0777

Format string vulnerability in the authdebug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging DEBUGLOGIN is enabled, allows remote attackers to execute arbitrary code...

CVE-2004-0777

CVE-2004-0777 is a format-string vulnerability in Courier-IMAP’s auth_debug function that can be triggered when DEBUG_LOGIN is enabled. Affected versions include Courier-IMAP 1.6.0–2.2.1 and 3.x–3.0.3. The issue allows remote code execution by supplying crafted input (username/password) containin...

courier-imap: Remote Format String Vulnerability

Background Courier-IMAP is an IMAP server which is part of the Courier mail system. It provides access only to maildirs. Description There is a format string vulnerability in the authdebug function which can be exploited remotely, potentially leading to arbitrary code execution as the user runnin...

Courier-imap debugging format string

Pre-authentication format string bug in debugging function...

[Full-Disclosure] iDEFENSE Security Advisory 08.18.04: Courier-IMAP Remote Format String Vulnerability

Courier-IMAP Remote Format String Vulnerability iDEFENSE Security Advisory 08.18.04 www.idefense.com/application/poi/display?id=131&type=vulnerabilities August 18, 2004 I. BACKGROUND Courier-IMAP is an IMAP/POP3 mail server popular on sites utilizing Qmail/Exim/Postfix. More information is...