GLSA-200710-17 : Balsa: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-17 Balsa: Buffer overflow Evil Ninja Squirrel discovered a stack-based buffer overflow in the irfetchseq function when receiving a long response to a FETCH command CVE-2007-5007. Impact : A remote attacker could entice a us...

Mercury IMAP Server SEARCH Command Remote Buffer Overflow

The remote host is running the Mercury Mail Transport System, a free suite of server products for Windows and NetWare associated with Pegasus Mail. The remote installation of Mercury Mail includes an IMAP server that is affected by a buffer overflow vulnerability. Using a specially- crafted SEARC...

Mercury IMAP Server <= 4.52 SEARCH Command Buffer Overflow

Binary data 4220.prm...

SurgeMail IMAP Server SEARCH Command Remote Buffer Overflow

According to its banner, the remote host is running a version of the SurgeMail Mail Server older than 3.8k2 / 3.8m. Such versions are reportedly affected by a buffer overflow flaw in its IMAP service that can be triggered using a specially crafted 'SEARCH' command. An authenticated attacker can...

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007 Mercury/32 v4.52 is a security patch release, addressing a serious weakness in the MercuryS SMTP server specifically, a buffer overflow vulnerability in the way the server processes the AUTH command. All v4.x versions of Mercury earlier than v4.51...

[SECURITY] Fedora Core 6 Update: dovecot-1.0.3-6.fc6

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...

IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow

IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow !/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:\perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMa...

IPSwitch IMAIL IMAP server buffer overflow

Buffer overflow in SEARCH and SUBSCRIBE commands and also during authentication procedure...

GLSA-200707-03 : Evolution: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200707-03 Evolution: User-assisted remote execution of arbitrary code The imaprescan function of the file camel-imap-folder.c does not properly sanitize the 'SEQUENCE' response sent by an IMAP server before being used to index...

Evolution: User-assisted remote execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Camel is the Evolution Data Server module that handles mail functions. Description The imaprescan function of the file camel-imap-folder.c does not properly sanitize the "SEQUENCE" response sent by an IMAP server before bei...

evolution security update

CentOS Errata and Security Advisory CESA-2007:0510 Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server...

CentOS 5 : evolution-data-server (CESA-2007:0510)

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

Mandrake Linux Security Advisory : evolution (MDKSA-2007:136)

A flaw in Evolution/evolution-data-server was found in how Evolution would process certain IMAP server messages. If a user were tricked into connecting to a malicious IMAP server, it was possible that arbitrary code could be executed with the privileges of the user using Evolution. Updated packag...

RHEL 5 : evolution-data-server (RHSA-2007:0510)

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

Important: Red Hat Security Advisory: evolution-data-server security update

Updated evolution-data-server package that fixes a security bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The evolution-data-server package provides a unified backend for programs that wo...

Evolution Data Server integer overflow

Integer overflow in Camel mailer component on negative value of IMAP server SEQUENCE command reply...

CVE-2007-3166

CVE-2007-3166 describes a buffer overflow in Qualcomm Eudora 7.1.0.9 that allows a user-assisted, remote IMAP server to execute arbitrary code via a long FLAGS response to a SELECT INBOX command. The CVE is documented in NVD with a base score of 6.8 (Medium) and an attack vector of NETWORK with n...

IMAP SSL/TLS Server Detection

Binary data 3999.prm...

MERCUR Messaging IMAP Server NTLM Authentication NTLMSSP Argument Remote Overflow

The remote host is running MERCUR Messaging, a commercial mail server for Windows. The IMAP server component of MERCUR Messaging is affected by a buffer overflow vulnerability involving its support for NTLM authentication. An unauthenticated, remote attacker can leverage this issue to crash the...

Courier-IMAP: Remote execution of arbitrary code

Background Courier-IMAP is an IMAP server which is part of the Courier mail system. It provides access only to maildirs. Description CJ Kucera has discovered that some Courier-IMAP scripts don't properly handle the XMAILDIR variable, allowing for shell command injection. Impact A remote attacker...