Lucene search
+L

5 matches found

Hacker One
Hacker One
•added 2026/08/26 3:47 p.m.•33 views

curl: 27: IMAP custom FETCH listing classification skips literal boundaries, enabling response desynchronization

Summary iscustomfetchlistingmatch in lib/imap.c classifies any custom FETCH whose sequence set contains : or , as a "listing." For that classification, imapstatelistsearchresp skips literal detection entirely. The ping-pong line parser then scans the server-declared literal body as IMAP protocol...

5.8AI score
SaveExploits0
Rows per page
Query Builder