4922 matches found
Alt-N MDaemon 8.1.1 IMAP Server - Remote Format String
source: https://www.securityfocus.com/bid/16854/info Alt-N MDaemon IMAP Server is affected by a remote format-string vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in the format-specifier argument to a formatted printing...
noccw_10_incl_xpl.txt
------ NOCC Webmail remote code execution / / cross site scripting / path disclosure -------------------------------------------------------------------------------- software: site: http://nocc.sourceforge.net/ description: "NOCC is a webmail client written in PHP. It provides webmail access to...
ArGoSoft Mail Server < 1.8.8.6 '_DUMP' Information Disclosure
Binary data 3447.prm...
ArGoSoft Mail Server Pro IMAP RENAME Command Traversal Arbitrary Directory Creation
The remote host is running ArGoSoft Mail Server, a messaging system for Windows. The IMAP server bundled with the version of ArGoSoft Mail Server installed on the remote host fails to filter directory traversal sequences from mailbox names passed to the 'RENAME' command. An authenticated attacker...
CVE-2006-0377
CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimapmailboxselect command, aka "IMAP injection."...
Crlf injection
CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimapmailboxselect command, aka "IMAP injection."...
CVE-2006-0377
CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimapmailboxselect command, aka "IMAP injection."...
CVE-2006-0377
CVE-2006-0377 affects SquirrelMail 1.4.0–1.4.5, enabling CRLF injection in the sqimap_mailbox_select path to inject IMAP commands. The Debian/DSA-988 advisory and related OpenVAS entries confirm this trio of vulnerabilities and note a fixed version (Debian: 1.2.6-5 for old Woody; CentOS/Red Hat a...
NOCC Webmail <= 1.0 multiple vulnerabilities
------ NOCC Webmail = 1.0 multiple arbitrary local inclusion + ---------------- php injection - remote code execution / / cross site scripting / path disclosure -------------------------------------------------------------------------------- software: site: http://nocc.sourceforge.net/ descriptio...
NSA Group Security Advisory NSAG-№200-24.02.2006 Vulnerability ArGoSoft Mail Server Pro IMAP
Advisory: NSAG-№200-24.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: ArGoSoft Mail Server Pro 1.8 IMAP Site of manufacturer: www.argosoft.com The status: 19/11/2005 - Publication is postponed...
CVE-2006-0377
CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands via newline characters in the mailbox parameter of the sqimapmailboxselect command, aka "IMAP injection."...
Buffer overflow
Buffer overflow in the IMAP service of TrueNorth Internet Anywhere IA eMailserver 5.3.4 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long SEARCH argument...
CVE-2006-0853
Buffer overflow in the IMAP service of TrueNorth Internet Anywhere IA eMailserver 5.3.4 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long SEARCH argument...
CVE-2006-0853
CVE-2006-0853 describes a buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4. The vulnerability allows remote authenticated users to crash the IMAP server and potentially execute arbitrary code via a long SEARCH argument. The Nessus entry corroborates that a...
CVE-2006-0853
Buffer overflow in the IMAP service of TrueNorth Internet Anywhere IA eMailserver 5.3.4 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long SEARCH argument...
squirrelmail -- multiple vulnerabilities
Multiple vulnerabilities has been discovered since 1.4.5, including IMAP injection as well as some XSS issues...
TrueNorth IA eMailserver IMAP server buffer overflow
Buffer overflow in oversized SEARCH command...
IA eMailServer IMAP SEARCH Command Remote Overflow
The remote host is running IA eMailServer, a commercial messaging system for Windows. The IMAP server bundled with the version of IA eMailServer installed on the remote host crashes when it receives a SEARCH command argument of 560 or more characters. An authenticated attacker could exploit this...
[AJECT] TrueNorth IA eMailserver 5.3.4 buffer overflow vulnerability
---------------------------------------- Synopsis ---------------------------------------- TrueNorth IA eMailserver 5.3.4 is prone to a remote buffer overflow vulnerability in the IMAP server. Product: Internet Anywhere eMailserver Corporate Edition Version: 5.3.4 and probably the older versions...
SquirrelMail < 1.4.6 Multiple Vulnerabilities
The installed version of SquirrelMail fails to sanitize user-supplied input to mailbox names before passing them to an IMAP server. An unauthenticated attacker may be able to leverage this issue to launch attacks against the underlying IMAP server or against a user's mailboxes by tricking him int...