4937 matches found
CVE-2007-5740
CVE-2007-5740 affects Perdition, a IMAP proxy component; the vulnerability is a format string error in Perdition’s IMAP output handling (IMAPD) that could allow an unauthenticated remote attacker to execute arbitrary code. Impact: remote code execution on the Perdition server via a specially craf...
Perdition IMAP proxy server format string vulnerability
Format string vulnerability with IMAP tag...
[Full-disclosure] SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability
SEC Consult Security Advisory 20071031-0 ==================================================================================== title: Perdition IMAP proxy strvwrite format string vulnerability program: Perdition Mail Retrieval Proxy vulnerable version: =1.17 homepage: http://www.vergenet.net/ foun...
Perdition 1.17 - IMAPD __STR_VWRITE Remote Format String
Perdition 1.17 - IMAPD STRVWRITE Remote Format String source: https://www.securityfocus.com/bid/26270/info Perdition IMAP proxy server is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a...
Perdition 1.17 - IMAPD __STR_VWRITE Remote Format String
source: https://www.securityfocus.com/bid/26270/info Perdition IMAP proxy server is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker can exploit this issu...
perdition -- str_vwrite format string vulnerability
SEC-Consult reports: Perdition IMAP is affected by a format string bug in one of its IMAP output-string formatting functions. The bug allows the execution of arbitrary code on the affected server. A successful exploit does not require prior authentication...
CVE-2007-3510
Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authenticated users to execute arbitrary code via a long mailbox name...
Buffer overflow
Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authenticated users to execute arbitrary code via a long mailbox name...
CVE-2007-3510
Buffer overflow in the IMAP service in IBM Lotus Domino before 6.5.6 FP2, and 7.x before 7.0.3, allows remote authenticated users to execute arbitrary code via a long mailbox name...
CVE-2007-3510
IBM Lotus Domino IMAP Server is affected by a buffer overflow in the IMAP service prior to 6.5.6 FP2 and prior to 7.0.3 for 7.x. A remote authenticated user can exploit this via a long mailbox name to execute arbitrary code in the server context. Exploitation often requires valid IMAP credentials...
IBM Lotus Domino 7.0.2 - IMAP4 LSUB Buffer Overflow
IBM Lotus Domino 7.0.2 - IMAP4 LSUB Buffer Overflow source: https://www.securityfocus.com/bid/26219/info IBM Lotus Domino Server is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory...
CVE-2002-2325
The CVE-2002-2325 entry concerns the c-client library used by IMAP (as in Pine 4.20–4.44). It describes a denial of service where a MIME-encoded email with a Content-Type header containing an empty boundary field can crash the client. The vulnerability is tied to the software versions mentioned (...
CVE-2002-2325
The c-client library in Internet Message Access Protocol IMAP dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service client crash via a MIME-encoded email with Content-Type header containing an empty boundary field...
CVE-2003-1523
The CVE-2003-1523 entry concerns the dbmail 1.1 IMAP daemon. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands via the login username and the mailbox name (and possibly additional vectors). The affected component is the IMAP daemon of dbmail 1.1, ...
CVE-2003-1523
SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the 1 login username, 2 mailbox name, and possibly other attack vectors...
CVE-2003-1470
The CVE concerns MDaemon IMAP Service with versions 6.7.5 and earlier. A buffer overflow is triggered in the IMAP CREATE command when a mailbox name is excessively long, allowing a remote authenticated user to crash the service and potentially execute arbitrary code. The descriptions consistently...
CVE-2003-1470
Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service crash and execute arbitrary code via a CREATE command with a long mailbox name...
iDefense Security Advisory 10.23.07: IBM Lotus Domino IMAP Buffer Overflow Vulnerability
IBM Lotus Domino IMAP Buffer Overflow Vulnerability iDefense Security Advisory 10.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 23, 2007 I. BACKGROUND IBM Lotus Domino Server software provides messaging, calendaring and scheduling capabilities on a variety of operating systems...
IBM Lotus Domino IMAP Service Mailbox Name Overflow
The IMAP server component of IBM Lotus Domino Server installed on the remote host fails to properly validate the mailbox name before copying it into a fixed-size stack buffer as part of handling certain unspecified commands. Using a specially crafted mailbox name to which he is subscribed, an...