5356 matches found
CVE-2008-7182
SurgeMail IMAP Service APPEND command Buffer Overflow (CVE-2008-7182) affects NetWin Surgemail 3.9e and possibly earlier versions up to 3.9g2. Affected component is the IMAP service; root cause is a buffer overflow triggered by a long first argument to the APPEND command. Impact stated: remote au...
CVE-2008-7182
Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 a...
cyrus-imapd / Dovecot integer overflow
Integer overflow on SIEVE mail flow management scripts processing...
[SECURITY] Fedora 11 Update: fetchmail-6.3.9-5.fc11
Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...
[BMSA-2009-06] Remote code execution in BKAV eOffice
BLUE MOON SECURITY ADVISORY 2009-06 =================================== :Title: Remote code execution in BKAV eOffice :Severity: Critical :Reporter: Blue Moon Consulting :Products: eOffice v5.1.5 :Fixed in: -- Description ----------- We could not find out the definitive description for eOffice in...
cyrus-imapd -- Potential buffer overflow in Sieve
The Cyrus IMAP Server ChangeLog states: Fixed CERT VU336053 - Potential buffer overflow in Sieve...
CVE-2008-7022
Insecure method vulnerability in ChilkatMailv79.dll in the Chilkat Software IMAP ActiveX control ChilkatMail2.ChilkatMailMan2.1 allows remote attackers to execute arbitrary programs via the LoadXmlEmail method...
CVE-2008-7022
The CVE-2008-7022 entry describes an insecure method vulnerability in ChilkatMail_v7_9.dll, part of the Chilkat Software IMAP ActiveX control (ChilkatMail2.ChilkatMailMan2.1). A remote attacker could exploit the LoadXmlEmail method to execute arbitrary code. The affected component is the ChilkatM...
CVE-2008-7022
Insecure method vulnerability in ChilkatMailv79.dll in the Chilkat Software IMAP ActiveX control ChilkatMail2.ChilkatMailMan2.1 allows remote attackers to execute arbitrary programs via the LoadXmlEmail method...
[SECURITY] Fedora 10 Update: squirrelmail-1.4.19-2.fc10
SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...
CMailServer Version Detection
The script detects the installed version of CMailServer and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodcmailserverdetect.nasl 7076 2017-09-07 11:53:47Z teissa $ CMailServer Version Detection Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.com This progra...
CVE-2008-6984
Plesk 8.6.0, when short mail login names SHORTNAMES are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with 1 a base64-encoded username that begins with a valid shortname, or 2 a username that matches a valid password, as demonstrated using a SMTP and...
Authentication flaw
Plesk 8.6.0, when short mail login names SHORTNAMES are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with 1 a base64-encoded username that begins with a valid shortname, or 2 a username that matches a valid password, as demonstrated using a SMTP and...
CVE-2008-6984
Plesk 8.6.0, when short mail login names SHORTNAMES are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with 1 a base64-encoded username that begins with a valid shortname, or 2 a username that matches a valid password, as demonstrated using a SMTP and...
Mandrake Security Advisory MDVSA-2009:166 (c-client)
The remote host is missing an update to c-client announced via advisory MDVSA-2009:166. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:166 (c-client)
The remote host is missing an update to c-client announced via advisory MDVSA-2009:166. OpenVAS Vulnerability Test $Id: mdksa2009166.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:166 c-client Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...
openSUSE Security Update : imap (imap-368)
Insufficient buffer length checks in the imap client library may crash applications that use the library to print formatted email addresses. The imap daemon itself is not affected but certain versions of e.g. the php imap module are CVE-2008-5514. The client library could also crash when a rogue...
openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-61)
This update of php5 fixes : - possible stack-based buffer overflow CVE-2008-2050 - incomplete escapeshellcmd CVE-2008-2051 - printf integer overflow CVE-2008-1384 - insecure GENERATESEED macro CVE-2008-2107 - timezone update for DST in Pakistan %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
openSUSE Security Update : imap (imap-368)
Insufficient buffer length checks in the imap client library may crash applications that use the library to print formatted email addresses. The imap daemon itself is not affected but certain versions of e.g. the php imap module are CVE-2008-5514. The client library could also crash when a rogue...
openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-310)
This update fixes a buffer overflow in phpimap.c that uses an old IMAP API. This bug can be exploited to execute arbitrary code remotely via long IMAP requests. CVE-2008-2829 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...