CVE-2005-2278

Stack-based buffer overflow in the IMAP daemon imapd in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name...

CVE-2005-2278

The CVE-2005-2278 issue affects MailEnable Professional IMAPD 1.54. A stack-based buffer overflow occurs in the IMAP STATUS command when handling long mailbox names, exploitable by an authenticated remote user to execute arbitrary code. Valid exploits are evidenced by multiple sources (Metasploit...

SquirrelMail Arbitrary Variable Overwriting Vulnerability

GulfTech Security Research July 14th, 2005 Vendor : The SquirrelMail Project Team URL : http://www.squirrelmail.org/ Version : SquirrelMail 1.4.5-RC1 && Earlier Risk : Variable Overwriting Description: SquirrelMail is a standards-based webmail package written in php. It includes built-in pure PHP...

MailEnable IMAP STATUS Command Remote Overflow

The remote host is running a version of MailEnable's IMAP service that is prone to a buffer overflow attack when processing a STATUS command with a long mailbox name. Once authenticated, an attacker can exploit this flaw to execute arbitrary code subject to the privileges of the affected...

MailEnable mail server multiple vulnerabilities

DoS on extended ASCII characted in EHLO command. Multiple IMAP buffer overflows. Authorization HTTPS buffer overflow...

MailEnable IMAP STATUS Command Remote Overflow

Binary data 3068.prm...

[SA15986] MailEnable IMAP "STATUS" Command Buffer Overflow

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

FreeBSD : imap-uw -- authentication bypass when CRAM-MD5 is enabled (d1bbc235-c0c9-45cd-8d2d-c1b8fd22e616)

The CRAM-MD5 authentication support of the University of Washington IMAP and POP3 servers contains a vulnerability that may allow an attacker to bypass authentication and impersonate arbitrary users. Only installations with CRAM-MD5 support configured are affected. %NASLMINLEVEL 70300 C Tenable...

CVE-2004-2194

CVE-2004-2194 – MailEnable DoS . Affected: MailEnable Professional Edition < 1.53 and Enterprise Edition

CVE-2004-2194

MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service crash via malformed 1 SMTP or 2 IMAP commands...

IA eMailServer IMAP format string vulnerability

IMAP mail server LIST command format strinb vulnerability...

CVE-2002-1782

The default configuration of University of Washington IMAP daemon wu-imapd, when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user...

CVE-2002-1782

The CVE-2002-1782 entry concerns the University of Washington IMAP daemon (wu-imapd). In default configurations on systems that deny shell access, an authenticated IMAP user can read arbitrary files as that user. This is supported by multiple connected sources (OpenVAS/Nessus entries) describing ...

CVE-2002-1782

The default configuration of University of Washington IMAP daemon wu-imapd, when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user...

Novell NetMail < 3.52C IMAP Agent Multiple Remote Overflows

The remote host is running Novell NetMail, a messaging and calendaring system for Windows, Linux, Unix, and NetWare. The version of NetMail installed on the remote host is prone to multiple buffer overflows in its IMAP agent, one when handling long command tags, the other involving IMAP command...

CVE-2005-1758

Novell NetMail IMAPD is affected by a heap overflow in the IMAP command continuation handling in NetMail versions before 3.52C, enabling unauthenticated remote code execution with the privileges of the NetMail service. Exploitation details are described in iDEFENSE advisory and the Nessus/SEC ref...

CVE-2005-1902

Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' mail and perform operations on arbitrary directories via .. sequences in the 1 SELECT, 2 CREATE, 3 DELETE, and 4 RENAME commands...

CVE-2005-1902

The CVE-2005-1902 entry concerns the IMAP service of SPA-PRO Mail @Solomon 4.00. The vulnerability is a directory traversal in IMAP commands (SELECT, CREATE, DELETE, RENAME) that allows remote authenticated users to read other users’ mail and perform operations on arbitrary directories by using ....

CVE-2005-1903

The CVE-2005-1903 entry concerns SPA-PRO Mail @Solomon 4.00: the IMAP service is affected by a buffer overflow triggered by a long CREATE command, allowing remote authenticated users to execute arbitrary code. The vulnerability is rooted in improper handling of IMAP CREATE data, enabling potentia...

CVE-2005-1902

Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' mail and perform operations on arbitrary directories via .. sequences in the 1 SELECT, 2 CREATE, 3 DELETE, and 4 RENAME commands...