CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

DEBIAN-CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

UoW imap Server (uw-imapd) Arbitrary Remote File Access

The target is running an IMAP daemon that allows an authenticated user to retrieve and manipulate files that would be available to that user via a shell. If IMAP users are denied shell access, you may consider this a vulnerability. This script was written by George A. Theall, . See the Nessus...

CVE-2002-1580

CVE-2002-1580 affects Cyrus IMAP server (versions 1.4 and 2.1.10) due to an integer/buffer overflow in imapparse.c. A large length value can trigger a pre-authentication buffer overflow, potentially allowing remote code execution. Related OpenVAS/Nessus entries describe pre-login heap/buffer over...

CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347...

CVE-2003-1177

Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long 1 AUTH command to the POP3 server or 2 AUTHENTICATE command to the IMAP server...

CVE-2003-0319

Buffer overflow in the IMAP server IMAPMax for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command...

Important: Red Hat Security Advisory: balsa security update

Updated Balsa packages are available which fix potential vulnerabilities in the IMAP handling code and in libesmtp. Balsa is a GNOME email client which includes code from Mutt. A potential buffer overflow exists in Balsa versions 1.2 and higher when parsing mailbox names returned by an IMAP serve...

CVE-2003-0319

CVE-2003-0319: A buffer overflow in the MailMax IMAP server (MailMax/SmartMax) affects version 5.0.10.8 and earlier. The vulnerability allows remote authenticated users to execute arbitrary code via a long SELECT command. Exploitation details are supported by NVD/Nessus entries. Remediation: upgr...

MailMax IMAP Server SELECT Command Remote Overflow

The remote host is running a version of the MailMax IMAP server which, according to its version number, is vulnerable to various overflows which may allow an authenticated user to execute arbitrary commands on this host or to disable it remotely. C Tenable Network Security, Inc. Ref: Date: Sat, 1...

MailMax < 5.0.10.8 Multiple Remote Overflows

The remote host is running a version of the MailMax mail server that is vulnerable to various overflows. These issues may allow an unauthenticated, remote attacker to disable the affected service and possibly to execute arbitrary commands on the affected host. C Tenable Network Security, Inc...

MDaemon IMAP Server CREATE Command Mailbox Name Handling Overflow

According to its banner, the version of MDaemon running on the remote host has a buffer overflow vulnerability in the CREATE command. A remote attacker could exploit this to execute arbitrary code, or cause a denial of service. A crash would prevent other MDaemon services SMTP, POP from running a...

CVE-2002-0146

fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array...

CVE-2002-0379

CVE-2002-0379 describes a buffer overflow in the University of Washington UW-IMAPd server (uw-imapd) for imap-2001/imapd 2001.315 and imap-2001a/imapd 2001.315, and imapd 2000.287 and earlier, when handling legacy RFC 1730 BODY requests. The vulnerability allows a remote authenticated user to exe...

CVE-2002-0379

Buffer overflow in University of Washington imap server uw-imapd imap-2001 imapd 2001.315 and imap-2001a imapd 2001.315 with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request...

CVE-2003-0140

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...

CVE-2003-0140

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...

CVE-2003-0140

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...

CORE-20030304-02: Vulnerability in Mutt Mail User Agent

Core Security Technologies Advisory http://www.coresecurity.com Vulnerability in Mutt Mail User Agent Date Published: 2003-03-20 Last Update: 2003-03-19 Advisory ID: CORE-20030304-02 Bugtraq ID: 7120 CVE CAN: None currently assigned Title: Mutt Controlled IMAP server buffer overflow Class: Bounda...

IMAP Service Banner Retrieval

An IMAP Internet Message Access Protocol server is installed and running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11414; scriptversion "$Revision: 1.11 $"; scriptnameenglish:"IMAP Service Banner Retrieval"; scriptcopyrightenglish:"This script...