MDaemon IMAP FETCH command buffer overflow

Added: 03/31/2008 CVE: CVE-2008-1358 BID: 28245 OSVDB: 43111 Background MDaemon is an e-mail server for Windows. Problem A buffer overflow vulnerability in the IMAP service allows authenticated users to execute arbitrary commands by sending a FETCH command with a long BODY. Resolution Upgrade to...

Stack overflow

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...

CVE-2008-1498

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command...

Stack overflow

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command...

CVE-2008-1497

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...

CVE-2008-1498

CVE-2008-1498 is a stack-based buffer overflow in the IMAP LIST command of NetWin Surgemail, affecting 3.8k4-4 and earlier. Remote authenticated users could execute arbitrary code via a long first argument to LIST. Exploitation is documented (see Exploit-DB link in references). No patch/version o...

CVE-2008-1497

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...

CVE-2008-1497

CVE-2008-1497 and related CVEs describe a stack-based buffer overflow in NetWin Surgemail IMAP service. CVE-2008-1497 affects SurgeMail 38k4-4 and earlier, allowing remote authenticated users to execute arbitrary code via long arguments to the LSUB command. Related entries (CVE-2008-7182 and CVE-...

CVE-2008-1498

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command...

SurgeMail IMAP服务LSUB命令远程栈溢出漏洞

BUGTRAQ ID: 28377 SurgeMail是下一代的邮件服务器，可运行在Windows NT/2K或UNIX平台上，支持所有的标准IMAP、POP3、SMTP、SSL和ESMTP协议。 Surgemail的IMAP服务中存在栈溢出漏洞，如果远程攻击者向该服务发送了带有超长参数的LSUB命令的话，就可以触发这个溢出，导致执行任意指令。 NetWin SurgeMail 3.8k4-4 - Microsoft Windows XP SP2 NetWin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://netwinsite.com/...

Preemptive Protection against Alt-N MDaemon IMAP Server FETCH Command Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in the Alt-N MDaemon IMAP Server. The MDaemon IMAP server is a server side implementation of the IMAP protocol. Internet Message Access Protocol IMAP is a standard protocol for accessing e-mail from a local server that provides management of...

Gentoo ssl-cert eclass信息泄露漏洞

BUGTRAQ ID: 28350 CVECAN ID: CVE-2008-1383 Gentoo Linux是一套通用的、快捷的、完全免费的Linux版本，面向开发人员和专业网络人员。 Gentoo Linux的ssl-cert.eclass实现上存在漏洞，本地攻击者可能利用此漏洞非授权获取信息。...

SurgeMail buffer overflow

Buffer overflow in LSUB IMAP command...

MDaemon IMAP Server FETCH Command Remote Buffer Overflow

According to its banner, the version of MDaemon installed on the remote host contains a stack-based buffer overflow in its IMAP server component that can be triggered via a FETCH command with a long BODY data item. An authenticated, remote attacker may be able to leverage this issue to crash the...

[Full-disclosure] [INFIGO-2008-03-07]: Surgemail 38k4 IMAP server remote stack overflow

INFIGO IS Security Advisory ADV-2008-03-07 http://www.infigo.hr/en/ Title: Surgemail 38k4 IMAP server remote stack overflow Advisory ID: INFIGO-2008-03-07 Date: 2008-03-21 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2008-03-07 Impact: Remote code execution Risk Level: High...

Surgemail 3.8 - IMAP LSUB Command Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/28377/info SurgeMail is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary machine code in the conte...

SurgeMail IMAP服务LIST命令远程栈溢出漏洞

BUGTRAQ ID: 28260 SurgeMail是下一代的邮件服务器，可运行在Windows NT/2K或UNIX平台上，支持所有的标准IMAP、POP3、SMTP、SSL和ESMTP协议。 SurgeMail的IMAP服务处理超长畸形的LIST命令时存在漏洞，远程攻击者可以服务发送带有超长参数的LIST命令触发栈溢出，导致执行任意指令。 NetWin SurgeMail 3.8k4-4 NetWin ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://netwinsite.com/...

Alt-N MDaemon IMAP服务器FETCH命令远程栈溢出漏洞

BUGTRAQ ID: 28245 MDaemon是一款基于Windows的邮件服务程序。 MDaemon的IMAP服务器在处理FETCH命令的参数数据时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者向该服务发送的FETCH命令中的BODY数据项包含有超长的分段标识的话，就可以触发这个溢出，导致执行任意代码。但成功攻击要求拥有有效的用户凭据。 Alt-N MDaemon 9.64 Alt-N ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.altn.com...

NetWin SurgeMail <= 3.8k4-4 IMAP LIST Command Remote Overflow

Binary data 4431.prm...

Dovecot: Multiple vulnerabilities

Background Dovecot is a lightweight, fast and easy to configure IMAP and POP3 mail server. Description Dovecot uses the group configured via the "mailextragroups" setting, which should be used to create lockfiles in the /var/mail directory, when accessing arbitrary files CVE-2008-1199. Dovecot do...