[SECURITY] Fedora 8 Update: stunnel-4.24-0.fc8

Stunnel is a socket wrapper which can provide SSL Secure Sockets Layer support to ordinary applications. For example, it can be used in conjunction with imapd to create an SSL secure IMAP server...

[SECURITY] Fedora 9 Update: stunnel-4.24-1.fc9

Stunnel is a socket wrapper which can provide SSL Secure Sockets Layer support to ordinary applications. For example, it can be used in conjunction with imapd to create an SSL secure IMAP server...

RHEL 5 : dovecot (RHSA-2008:0297)

An updated dovecot package that fixes several security issues and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Dovecot is an IMAP server for Linux and UNIX-like systems, primarily...

mod_imap cross-site scripting vulnerability

Overview The "modimap" and "modimagemap" modules of the Apache HTTP Server are used for implementing server-side image map processing. modimap and modimagemap are affected by a cross-site scripting vulnerability when referer values are used in an image map in such a way that they do not handle...

Low: Red Hat Security Advisory: dovecot security and bug fix update

An updated dovecot package that fixes several security issues and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Dovecot is an IMAP server for Linux and UNIX-like systems, primarily...

httpd: mod_imagemap XSS

Cross-site scripting XSS vulnerability in the 1 modimap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the 2 modimagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WinWebMail 3.7.3 - IMAP Login Data Handling Denial of Service

source: https://www.securityfocus.com/bid/28721/info WinWebMail is prone to a denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied input. Remote attackers can exploit this issue to crash the server and deny service to legitimate users. Given the...

CVE-2008-1713

MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service application crash via a long string to IMAP port 143/tcp...

Code injection

MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service application crash via a long string to IMAP port 143/tcp...

CVE-2008-1713

MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service application crash via a long string to IMAP port 143/tcp...

CVE-2008-1713

CVE-2008-1713 affects NoticeWare Email Server 4.6.1.0 (MailServer.exe). The vulnerability allows remote attackers to cause an application crash (DoS) by sending a long string to the IMAP port (143/tcp). The connected sources confirm the component and the attack vector, but do not provide a specif...

MDaemon 9.6.4 IMAPD FETCH Buffer Overflow

This module exploits a stack buffer overflow in the Alt-N MDaemon IMAP Server version 9.6.4 by sending an overly long FETCH BODY command. Valid IMAP account credentials are required. Credit to Matteo Memelli This module requires Metasploit: https://metasploit.com/download Current source:...

noticeware-dos.txt

NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on XP/2003 Taken from :...

Noticeware Email Server 4.6.1.0 - Denial of Service

Noticeware Email Server 4.6.1.0 - Denial of Service NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on...

Noticeware Email Server 4.6.1.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= Noticeware Email Server 4.6.1.0 Denial of Service Exploit ========================================================= NoticeWare Email Server Application: Noticeware Email Server Version:...

Noticeware Email Server 4.6.1.0 Denial of Service Exploit

No description provided by source. NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on XP/2003 Taken from :...

Noticeware Email Server 4.6.1.0 - Denial of Service

NoticeWare Email Server Application: Noticeware Email Server Version: 4.6.1.0 NoticeWare Email Server Bugs: Denial Of Service/ Remote Crash Exploitation: Remote Date: 1st April 2008 Author: Ray Email: [email protected] Platforms: Tested on XP/2003 Taken from :...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...