5371 matches found
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-5787)
This update fixes a buffer overflow in phpimap.c that uses an old IMAP API. This bug can be exploited to execute arbitrary code remotely via long IMAP requests. CVE-2008-2829 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
GLSA-200811-05 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200811-05 PHP: Multiple vulnerabilities Several vulnerabilitites were found in PHP: PHP ships a vulnerable version of the PCRE library which allows for the circumvention of security restrictions or even for remote code execution i...
DEBIAN-CVE-2008-5005
Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...
CVE-2008-5006
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service NULL pointer dereference and application crash by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code...
CVE-2008-5005
Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...
CVE-2008-5005
Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...
Null pointer dereference
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service NULL pointer dereference and application crash by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code...
Stack overflow
Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...
CVE-2008-5005
Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...
CVE-2008-5005
CVE-2008-5005 describes a set of stack-based buffer overflows in the UW IMAP toolkit family (UW IMAP Toolkit 2002–2007c, Alpine 2.00 and earlier, Panda IMAP). Root cause: improper handling of long mailbox names in tmail/dmail and in messages to a destination mailbox name with a plus sign, enablin...
CVE-2008-5005
Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail...
CVE-2008-5006
CVE-2008-5006 affects the UW IMAP toolkit’s c-client library (2007b) where smtp.c can trigger a NULL pointer dereference in remote SMTP interactions when a server responds to QUIT with a close instead of 221, causing a denial of service. Public listings consolidate this with related UW IMAP CVEs ...
CVE-2008-5006
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service NULL pointer dereference and application crash by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code...
Dovecot IMAP server DoS
Assertion on message headers parsing...
[SECURITY] Fedora 9 Update: uw-imap-2007d-1.fc9
The uw-imap package provides UW server daemons for both the IMAP Internet Message Access Protocol and POP Post Office Protocol mail access protocols. The POP protocol uses a "post office" machine to collect mail for users and allows users to download their mail to their local machine for reading...
[SECURITY] Fedora 8 Update: uw-imap-2007d-1.fc8
The uw-imap package provides UW server daemons for both the IMAP Internet Message Access Protocol and POP Post Office Protocol mail access protocols. The POP protocol uses a "post office" machine to collect mail for users and allows users to download their mail to their local machine for reading...
Fedora 9 : uw-imap-2007d-1.fc9 (2008-9396)
Addresses a security vulnerability in tmail and dmail: http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267 .html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...
Fedora 8 : uw-imap-2007d-1.fc8 (2008-9383)
Addresses a security vulnerability in tmail and dmail: http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267 .html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...
University of Washington IMAP 'tmail'和'dmail'本地缓冲区溢出漏洞
BUGTRAQ ID: 32072 CNCAN ID：CNCAN-2008110404 University of Washington IMAP是一款IMAP协议实现。 University of Washington IMAP包含的'tmail'和'dmail'存在缓冲区溢出，本地攻击者可以利用漏洞以应用程序权限执行任意指令。 'tmail'和'dmail'应用程序在从命令行中处理文件夹扩展参数时缺少正确的边界检查，通过提交超长文件夹名可触发基于栈的缓冲区溢出。tmail可允许以root用户权限执行任意指令。 有问题代码如下： tmail.cchar getusername char...