CVE-2008-5005

CVE-2008-5005 describes a set of stack-based buffer overflows in the UW IMAP toolkit family (UW IMAP Toolkit 2002–2007c, Alpine 2.00 and earlier, Panda IMAP). Root cause: improper handling of long mailbox names in tmail/dmail and in messages to a destination mailbox name with a plus sign, enablin...

CVE-2008-5005

Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...

CVE-2008-5005

Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...

CVE-2008-5006

smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service NULL pointer dereference and application crash by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code...

Dovecot IMAP server DoS

Assertion on message headers parsing...

[SECURITY] Fedora 9 Update: uw-imap-2007d-1.fc9

The uw-imap package provides UW server daemons for both the IMAP Internet Message Access Protocol and POP Post Office Protocol mail access protocols. The POP protocol uses a "post office" machine to collect mail for users and allows users to download their mail to their local machine for reading...

[SECURITY] Fedora 8 Update: uw-imap-2007d-1.fc8

The uw-imap package provides UW server daemons for both the IMAP Internet Message Access Protocol and POP Post Office Protocol mail access protocols. The POP protocol uses a "post office" machine to collect mail for users and allows users to download their mail to their local machine for reading...

University of Washington IMAP 'tmail'和'dmail'本地缓冲区溢出漏洞

BUGTRAQ ID: 32072 CNCAN ID：CNCAN-2008110404 University of Washington IMAP是一款IMAP协议实现。 University of Washington IMAP包含的'tmail'和'dmail'存在缓冲区溢出，本地攻击者可以利用漏洞以应用程序权限执行任意指令。 'tmail'和'dmail'应用程序在从命令行中处理文件夹扩展参数时缺少正确的边界检查，通过提交超长文件夹名可触发基于栈的缓冲区溢出。tmail可允许以root用户权限执行任意指令。 有问题代码如下： tmail.cchar getusername char...

Fedora 8 : uw-imap-2007d-1.fc8 (2008-9383)

Addresses a security vulnerability in tmail and dmail: http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267 .html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 9 : uw-imap-2007d-1.fc9 (2008-9396)

Addresses a security vulnerability in tmail and dmail: http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267 .html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

DTSA-174-1 uw-imap - buffer overflow

Bulletin has no description...

CVE-2008-4907

The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service persistent crash via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsi...

CVE-2008-4907

The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service persistent crash via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsi...

Design/Logic Flaw

The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service persistent crash via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsi...

CVE-2008-4907

The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service persistent crash via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsi...

Bitsec Security Advisory: UW/Panda IMAP [dt]mail buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =============================================================================== Bitsec Security Advisory: UW/Panda IMAP dtmail buffer overflow 2008-11-03 =============================================================================== Applications...

CVE-2008-4907

The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service persistent crash via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsi...

UW-IMAP < 2007d.404 Multiple Utility Mailbox Name Overflow

Binary data 4730.prm...

Dovecot无效消息地址解析拒绝服务漏洞

BUGTRAQ ID: 31997 Dovecot是Linux/UNIX类系统平台上的开源IMAP和POP3服务器。 Dovecot邮件系统没有正确地解析某些邮件头。如果远程攻击者发送了带有无效消息地址的恶意邮件的话，则IMAP客户端使用FETCH ENVELOPE命令从服务器收取邮件会导致之后的收件人无法接收邮件，因为进程会一直试图解析无效的邮件头直到崩溃。 Dovecot 1.1.5 Dovecot 1.1.4 Dovecot ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[SECURITY] Fedora 8 Update: dovecot-1.0.15-14.fc8

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plugins are in their subpackages...