GLSA-200603-09 : SquirrelMail: XSS and IMAP command injection

The remote host is affected by the vulnerability described in GLSA-200603-09 SquirrelMail: XSS and IMAP command injection SquirrelMail does not validate the rightframe parameter in webmail.php, possibly allowing frame replacement or cross-site scripting CVE-2006-0188. Martijn Brinkers and Scott...

Kerio MailServer IMAP Server Crafted LOGIN Command DoS

The remote host is running Kerio MailServer, a commercial mail server available for Windows, Linux, and Mac OS X platforms. The installed version of Kerio MailServer terminates abnormally when it receives certain malformed IMAP LOGIN commands. An unauthenticated, remote attacker can exploit this...

Ipswitch IMail Server/Collaboration Suite IMAP FETCH Command Overflow

The remote host is running Ipswitch Collaboration Suite / IMail Secure Server / IMail Server, commercial messaging and collaboration suites for Windows. According to its banner, the version of Ipswitch Collaboration Suite / IMail Secure Server / IMail Server installed on the remote host has a...

IMAP Proxy: Format string vulnerabilities

Background IMAP Proxy also known as up-imapproxy proxies IMAP transactions between an IMAP client and an IMAP server. Description Steve Kemp discovered two format string errors in IMAP Proxy. Impact A remote attacker could design a malicious IMAP server and entice someone to connect to it using...

CVE-2006-0929

Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. dot dot in the RENAME command...

CVE-2006-0929

CVE-2006-0929 affects the IMAP server of ArGoSoft Mail Server Pro 1.8.8.1. The issue is a directory traversal in the IMAP RENAME command where mailbox names are not filtered for "..", allowing an authenticated remote attacker to create/move folders arbitrarily on the affected system. The connecte...

Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String

Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String source: https://www.securityfocus.com/bid/16854/info Alt-N MDaemon IMAP Server is affected by a remote format-string vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in the...

Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String

source: https://www.securityfocus.com/bid/16854/info Alt-N MDaemon IMAP Server is affected by a remote format-string vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in the format-specifier argument to a formatted printing...

[AJECT] TrueNorth IA eMailserver 5.3.4 buffer overflow vulnerability

---------------------------------------- Synopsis ---------------------------------------- TrueNorth IA eMailserver 5.3.4 is prone to a remote buffer overflow vulnerability in the IMAP server. Product: Internet Anywhere eMailserver Corporate Edition Version: 5.3.4 and probably the older versions...

SquirrelMail < 1.4.6 Multiple Vulnerabilities

The installed version of SquirrelMail fails to sanitize user-supplied input to mailbox names before passing them to an IMAP server. An unauthenticated attacker may be able to leverage this issue to launch attacks against the underlying IMAP server or against a user's mailboxes by tricking him int...

SquirrelMail < 1.4.7 Multiple Vulnerabilities

Binary data 3441.prm...

Macallan Mail Solution directory traversal

Directory traversal in IMAP server...

Macallan IMAP Server Multiple Traversals Arbitrary File/Directory Manipulation

The remote host is running Macallan Mail Solution, a mail server for Windows. The IMAP server bundled with the version of Macallan installed on the remote host fails to filter directory traversal sequences from mailbox names passed to the 'CREATE', 'DELETE, 'RENAME', and 'SELECT' commands. An...

eudora_imap.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Ubuntu 4.10 : cyrus21-imapd vulnerabilities (USN-31-1)

Stefan Esser discovered several buffer overflows in the Cyrus IMAP server. Due to insufficient checking within the argument parser of the 'partial' and 'fetch' commands, an argument like 'bodyp' was detected as 'body.peek'. This could cause a buffer overflow which could be exploited to execute...

[SA18328] IBM Lotus Domino Denial of Service and Unspecified Vulnerabilities

TITLE: IBM Lotus Domino Denial of Service and Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA18328 VERIFY ADVISORY: http://secunia.com/advisories/18328/ CRITICAL: Moderately critical IMPACT: Unknown, DoS WHERE: From remote SOFTWARE: IBM Lotus Domino Web Access iNotes 6.x...

Multiple Rockliffe Mailsite mail server vulnerabilities

IMAP server user enumaration and directory traversal...

CVE-2005-4568

Multiple format string vulnerabilities in FTGate Technology formerly known as Floosietek FTGate 4.4 aka Build 4.4.000 Oct 26 2005 allow remote attackers to execute arbitrary code via format string specifiers in the 1 USER, 2 PASS, and 3 TOP commands to the POP3 server; and the 4 LIST and 5...

CVE-2005-4568

Multiple format string vulnerabilities in FTGate Technology formerly known as Floosietek FTGate 4.4 aka Build 4.4.000 Oct 26 2005 allow remote attackers to execute arbitrary code via format string specifiers in the 1 USER, 2 PASS, and 3 TOP commands to the POP3 server; and the 4 LIST and 5...

muts_mailenable_imap_examine.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...