[SECURITY] [DSA 841-1] New mailutils packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 841-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2005 http://www.debian.org/security/faq -...

MailEnable STATUS Command Overflow

Binary data 3250.prm...

DSA-841-1 mailutils - format string vulnerability

Bulletin has no description...

MailEnable IMAP Server W3C Logging Overflow

The remote host is running a version of MailEnable's IMAP service that is prone to a buffer overflow attack involving its handling of W3C logging. An attacker may be able to exploit this to execute arbitrary code subject to the privileges of the affected application, typically Administrator. C...

4D WebStar < 5.3.5 IMAP Mac OS Client DoS

Binary data 3249.prm...

Mercury32 Mail Server 4.01a (Pegasus) - IMAP Buffer Overflow

Mercury32 Mail Server 4.01a Pegasus - IMAP Buffer Overflow / Mercury imap4 server remote buffer overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not...

Mercury Mail <= 4.01a (Pegasus) IMAP Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ Mercury Mail www.milw0rm.com str0ke , I am sending it to you first dont doubt :d www.c0d3r.org study time started : , pitty for the c0d3r ! shout to actionspider read these lines...

Mercury/32 Mail Server 4.01a (Pegasus) - IMAP Buffer Overflow

/ Mercury imap4 server remote buffer overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : Mercury mail transport system 4.01a and prolly prior workaround : upgrade to 4.01b version advisory : not available right now company address : www.pmail.com timeline : ...

Mailutils: Format string vulnerability in imap4d

Background The GNU Mailutils are a collection of mail-related utilities, including an IMAP4 server imap4d. Description The imap4d server contains a format string bug in the handling of IMAP SEARCH requests. Impact An authenticated IMAP user could exploit the format string error in imap4d to execu...

GNU Mailutils imap4d Search Command Remote Format String

GNU Mailutils is a collection of mail utilities, including an IMAP4 daemon, a POP3 daemon, and a very simple mail client. The remote host is running a version of GNU Mailutils containing a format string vulnerability in its IMAP4 daemon. By exploiting these issues, a remote attacker may be able t...

mdaemon_imap.pm.txt

package Msf::Exploit::mdaemonimap; use strict; use base 'Msf::Exploit'; use Msf::Socket::Tcp; use Pex::Text; my $advanced = ; my $info = 'Name' = 'Mdaemon 8.0.3 IMAD CRAM-MD5 Authentication Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'Pri...

[SECURITY] [DSA 774-1] New fetchmail packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 774-1 [email protected] http://www.debian.org/security/ Martin Schulze August 12th, 2005 http://www.debian.org/security/faq -...

MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)

$Id: mdaemoncrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

DSA-774-1 fetchmail - buffer overflow

Bulletin has no description...

CVE-2004-2292

CVE-2004-2292 affects Alt-N MDaemon 7.0.1: a buffer overflow in the IMAP server triggered by a long STATUS command allows remote attackers to cause a denial of service (application crash). The available documents confirm the vulnerable component (IMAP STATUS handling) and the impact (DoS); no exp...

Alt-N MDaemon < 8.0.4 IMAP Multiple Buffer Overflows

Binary data 3105.prm...

MDaemon IMAP Server Multiple AUTHENTICATE Commands Remote Overflow

According to its banner, the remote version of MDaemon has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues to crash the service, or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Multiple MDaemon mail server vulnerabilities

DoS on incomlete CRAM-MD4 handshake, buffer overflow on IMAP CREATE command...

Alt-N MDaemon 8.0 - IMAP Server CREATE Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/14315/info Alt-N MDaemon IMAP Server is affected by a remote buffer overflow vulnerability. This issue presents itself when an attacker submits excessive data through the CREATE command subsequent to authentication This vulnerability may be leveraged to...