4922 matches found
PHP < 4.0.4 IMAP Module Overflow
Binary data 1479.prm...
PHP < 4.0.4 IMAP Module imap_open() Function Overflow
A version of PHP that is older than 4.0.4 is installed on this host. There is a buffer overflow condition in the IMAP module of this version that could allow an attacker to execute arbitrary commands with the privileges of the web server, if this server is serving a webmail interface. %NASLMINLEV...
UoW imapd (UW-IMAP) Multiple Command Remote Overflows
The remote host appears to be running UoW IMAP Server. The installed version is affected by a buffer overflow vulnerability because the software fails to verify input length of arguments to the 'LIST', 'COPY', 'RENAME', 'FIND', 'LSUB' commands. An attacker, exploiting this flaw could execute...
CVE-2001-0064
MDaemon IMAP Server DoS (CVE-2001-0064): The vulnerability affects MDaemon Webconfig/IMAP in versions up to 3.5.0 and earlier, where a remote attacker can crash the service by sending a long URL/argument terminated by a CRLF (LOGIN) string. OpenVAS/Nessus entries confirm remote DoS via long input...
CVE-2000-0961
Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command...
CVE-2000-0961
CVE-2000-0961 affects Netscape Messaging Server 4.15 Patch 2 with a buffer overflow in the IMAP LIST handling. The vulnerability could allow an attacker to execute arbitrary commands, reported as affecting local users (per CVE description) and, per a Nessus plugin, authenticated users potentially...
CVE-2000-0961
Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command...
Netscape Messaging Server IMAP LIST Command Remote Overflow
There is a buffer overflow in the remote imap server which allows an authenticated user to obtain a remote shell. A way to reproduce the overflow is to issue the command : list AAAAA...AAAA / %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc...
Дырка в Netscape Messaging Server
Классическое переполнение буфера в IMAP-команде list...
Ошибка в почтовой библиотеке UW
Некорректная работа с заголовком X-Keywords: позволяет повредить ящик пользователя во всех продуктах работающих с ящиком в формате IMAP imapd, pine. Кроме того, длинная переменная X-Keeyword: может вызвать переполнение буфера...
mailbox format incopatibility in (WU)imap with mail.local
Title : mailbox format incompatibility in WUimap with mail.local Authors : [email protected], [email protected] Impact : malicious user can put message with faked headers in user's mailbox bypassing virus protection, buffer overflow protection and another MTA/MDA filters. Also imap itself or MUA...
Ошибка между WU-imap И mail.local
При доставке письма в Unix mailbox mail.local считает, что разделителем между письмами является пустая строка со следующим за ней заголовком "From ". Если в письме встречается такое сочетание, то "From" комментируется знаком ''. К сожалению, imapd считает разделителем строку "From " в определенно...
Re[2]: mailbox parsing problem in imap-4.7c
Hello Mark, I have tested MDAs of different vendors under few OSs. All of them assume empty line to be at the end of message. Most of them comment out "From " in any "nnFrom " pattern. At least qpoper and BSD mail check for empty line under any supported OS and I never heard of any problem becaus...
re: Re[4]: mailbox parsing problem in imap-4.7c
On Thu, 10 Aug 2000 22:22:27 +0400, 3APA3A wrote: sendmail contains mail.local. mail.local is MDA. At least BSD distributions use mail.local from sendmail. Well, we'll have to hear what the sendmail people say then. I still contend that all lines that are in "From " header format should be quoted...
CVE-2000-0034
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."...
CVE-2000-0034
Netscape 4.7 is affected by CVE-2000-0034: during IMAP/POP sessions, the application records user passwords in the preferences.js file even when “remember passwords” is not enabled. Root cause is password storage in preferences.js, as documented in PT-1999-1842 and echoed in CVE records. Impact i...
Проблемы с Mercur Mailserver
Используя протокол IMAP можно обратиться к любому файлу на сервере, включая ящики других рользователей...
Переполнение буфера в Mercur
Переполнения буфера в различных командах IMAP, POP3...
CVE-2000-0233
CVE-2000-0233 affects the SuSE Linux IMAP server. The issue allows remote attackers to bypass IMAP authentication and gain privileges. The provided documents state this vulnerability and its impact but do not include concrete exploitation details, affected versions, or root-cause specifics. No re...