4991 matches found
Repetitive IMAP Login Failures
An attacker may attempt to gain access to email accounts by repeatedly trying to log in using various passwords, eventually finding the correct one, a technique known as "Brute Force". Successful exploitation may result in an unauthorized access to an email account...
[SECURITY] Fedora 26 Update: cyrus-imapd-3.0.4-1.fc26
The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...
Sending and receiving emails automatically in Python
There are different situations, when you may want to process email messages automatically. I will give some examples related to Vulnerability Management: Send a message to your colleagues that you are going to start a network vulnerability scan or WAS scan. It is much better than investigating...
CVE-2017-14230
In the mboxlistdofind function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service daemon crash via a 'LIST...
CVE-2017-14230
In the mboxlistdofind function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service daemon crash via a 'LIST...
Command injection
In the mboxlistdofind function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service daemon crash via a 'LIST...
CVE-2017-14230
In the mboxlistdofind function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service daemon crash via a 'LIST...
CVE-2017-14230
In the mboxlistdofind function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service daemon crash via a 'LIST...
CVE-2017-14230
In the mboxlistdofind function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service daemon crash via a 'LIST...
CVE-2017-14230
CVE-2017-14230 (Cyrus IMAP) affects the mboxlist_do_find function in imap/mboxlist.c prior to version 3.0.4. An off-by-one error in the LIST command prefix calculation can read uninitialized memory, potentially enabling a remote attacker to obtain sensitive information or cause a daemon crash. Th...
CVE-2017-14230
In the mboxlistdofind function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one error in prefix calculation for the LIST command caused use of uninitialized memory, which might allow remote attackers to obtain sensitive information or cause a denial of service daemon crash via a 'LIST...
cyrus-imapd -- broken "other users" behaviour
Cyrus IMAP 3.0.4 Release Notes states: Fixed Issue 2132: Broken "Other Users" behaviour...
Low: Red Hat Security Advisory: rh-nginx110-nginx security update
An update for rh-nginx110-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
IceWarp Mail Server Detection Consolidation
Consolidation of IceWarp Mail Server detections. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 25 Update: nginx-1.12.1-1.fc25
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...
[SECURITY] Fedora 26 Update: nginx-1.12.1-1.fc26
Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...
Cyrus IMAP Arbitrary File Write Vulnerability
Cyrus IMAP is a free, open source Unix and Linux-based operating system for supporting IMAP Interactive Mail Access Protocol protocol mail server . A security vulnerability exists in Cyrus IMAP versions prior to 3.0.3. The vulnerability can be exploited by a remote attacker to overwrite arbitrary...
Command injection
Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted 1 SYNCAPPLY, 2 SYNCGET or 3 SYNCRESTORE command...
