Buffer overflow

Multiple buffer overflows in the IMAP service MEIMAPS.EXE in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the 1 FETCH, 2 EXAMINE, and 3 UNSUBSCRIBE commands...

CVE-2008-1277

The IMAP service MEIMAPS.exe in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service crash via 1 SEARCH and 2 APPEND commands without required arguments, which triggers a NULL pointer dereference...

CVE-2008-1277

The CVE-2008-1277 issue affects MailEnable Professional Edition and Enterprise Edition up to version 3.13. The IMAP service (MEIMAPS.exe) is vulnerable when handling the SEARCH and APPEND commands without required arguments, causing a NULL pointer dereference and resulting in a denial of service....

CVE-2008-1276

CVE-2008-1276 affects MailEnable Professional/Enterprise IMAP (MEIMAPS.EXE) up to version 3.13. Multiple buffer overflows allow remote authenticated attackers to execute arbitrary code via long arguments to FETCH, EXAMINE, and UNSUBSCRIBE commands. This is documented in the NVD entry and related ...

CVE-2008-1277

The IMAP service MEIMAPS.exe in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service crash via 1 SEARCH and 2 APPEND commands without required arguments, which triggers a NULL pointer dereference...

CVE-2008-1276

Multiple buffer overflows in the IMAP service MEIMAPS.EXE in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the 1 FETCH, 2 EXAMINE, and 3 UNSUBSCRIBE commands...

MailEnable 3.13 - IMAP Service Multiple Remote Vulnerabilities

MailEnable 3.13 - IMAP Service Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/28145/info MailEnable is prone to multiple remote vulnerabilities in the IMAP service, including: - Multiple buffer-overflow vulnerabilities. - Multiple denial-of-service vulnerabilities due t...

MailEnable 3.13 - IMAP Service Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/28145/info MailEnable is prone to multiple remote vulnerabilities in the IMAP service, including: - Multiple buffer-overflow vulnerabilities. - Multiple denial-of-service vulnerabilities due to a NULL-pointer exception. An attacker may leverage these issu...

Authentication Capture: IMAP

This module provides a fake IMAP service that is designed to capture authentication credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Authentication Capture: IMAP', 'Description' = %...

[SECURITY] Fedora 8 Update: imp-4.1.6-1.fc8

IMP is the Internet Messaging Program, one of the Horde applications. It provides webmail access to IMAP and POP3 accounts. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information including help with IMP please visit http://www.horde.org...

[SECURITY] Fedora 7 Update: imp-4.1.6-1.fc7

IMP is the Internet Messaging Program, one of the Horde applications. It provides webmail access to IMAP and POP3 accounts. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information including help with IMP please visit http://www.horde.org...

Mozilla Thunderbird MIME外部主体堆溢出漏洞

CVECAN ID: CVE-2008-0304 Thunderbird是Mozilla发布的邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Thunderbird在处理畸形格式的邮件数据时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Thunderbird没有正确地解析邮件中的external-body MIME类型，在计算所要分配堆缓冲区的字节数时没有为所要拷贝的数据保留足够的空间。如果用户受骗打开了恶意邮件消息的话，就可能最多覆盖3字节的缓冲区，导致执行任意指令。 Mozilla Thunderbird 2.0.0.9 临时解决方法：...

Horde IMP: Security bypass

Background Horde IMP provides a web-based access to IMAP and POP3 mailboxes. Description Ulf Harnhammar, Secunia Research discovered that the "frame" and "frameset" HTML tags are not properly filtered out. He also reported that certain HTTP requests are executed without being checked. Impact A...

Debian: Security Advisory (DSA-1457-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

httpd: mod_imagemap XSS

Cross-site scripting XSS vulnerability in the 1 modimap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the 2 modimagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Debian Security Advisory DSA 274-1 (mutt)

The remote host is missing an update to mutt announced via advisory DSA 274-1. OpenVAS Vulnerability Test $Id: deb2741.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 274-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1410-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 1410-1. OpenVAS Vulnerability Test $Id: deb14101.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1410-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 988-1 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory DSA 988-1. Several vulnerabilities have been discovered in Squirrelmail, a commonly used webmail system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-0188 Martijn Brinkers a...

Debian Security Advisory DSA 900-1 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory DSA 900-1. Thomas Wolff discovered that the fetchmailconfig program which is provided as part of fetchmail, an SSL enabled POP3, APOP, IMAP mail gatherer/forwarder, creates the new configuration in an insecure fashion that c...

Debian Security Advisory DSA 1108-1 (mutt)

The remote host is missing an update to mutt announced via advisory DSA 1108-1. It was discovered that the mutt mail reader performs insufficient validation of values returned from an IMAP server, which might overflow a buffer and potentially lead to the injection of arbitrary code. OpenVAS...