4994 matches found
Command injection
Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service application crash via a crafted IMAP LOGIN command...
CVE-2006-1158
Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service application crash via a crafted IMAP LOGIN command...
CVE-2006-1158
CVE-2006-1158 affects Kerio MailServer prior to 6.1.3 Patch 1. An unauthenticated remote attacker can trigger a denial of service (application crash) by sending a crafted IMAP LOGIN command. The issue is caused by handling of certain malformed IMAP LOGIN inputs, leading to service disruption. Pub...
CVE-2006-1158
Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service application crash via a crafted IMAP LOGIN command...
SquirrelMail: Cross-site scripting and IMAP command injection
Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP protocols. Description SquirrelMail does not validate the rightframe parameter in webmail.php, possibly allowing frame replacement or cross-site scripting CVE-2006-0188. Martijn Brinkers and Scott Hughes...
[SA19168] Ipswitch IMail Server/Collaboration Suite IMAP FETCH Vulnerability
TITLE: Ipswitch IMail Server/Collaboration Suite IMAP FETCH Vulnerability SECUNIA ADVISORY ID: SA19168 VERIFY ADVISORY: http://secunia.com/advisories/19168/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: IMail Secure Server 2006 http://secunia.com/product/8651/ IMail Server 2006...
[SECURITY] [DSA 988-1] New squirrelmail packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 988-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 8th, 2006 http://www.debian.org/security/faq -...
DSA-988-1 squirrelmail - several
Bulletin has no description...
CVE-2006-1017
The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the 1 safemode or 2 openbasedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imapopen function, allow remote attackers to obtain access to ...
Design/Logic Flaw
The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the 1 safemode or 2 openbasedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imapopen function, allow remote attackers to obtain access to ...
CVE-2006-1017
The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the 1 safemode or 2 openbasedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imapopen function, allow remote attackers to obtain access to ...
GLSA-200603-04 : IMAP Proxy: Format string vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200603-04 IMAP Proxy: Format string vulnerabilities Steve Kemp discovered two format string errors in IMAP Proxy. Impact : A remote attacker could design a malicious IMAP server and entice someone to connect to it using IMAP Proxy...
CVE-2006-1017
CVE-2006-1017 corresponds to issues in the PHP c-client/imap handling. The connected OpenVAS entry references “PHP
IMAP Proxy: Format string vulnerabilities
Background IMAP Proxy also known as up-imapproxy proxies IMAP transactions between an IMAP client and an IMAP server. Description Steve Kemp discovered two format string errors in IMAP Proxy. Impact A remote attacker could design a malicious IMAP server and entice someone to connect to it using...
SquirrelFlaws.txt
============================================= INTERNET SECURITY AUDITORS ALERT 2006-002 - Original release date: February 27, 2006 - Last revised: February 27, 2006 - Discovered by: Vicente Aguilera Diaz - Severity: 3/5 ============================================= I. VULNERABILITY...
MDaemon IMAP AUTHENTICATE command buffer overflow
Added: 03/01/2006 BID: 14317 OSVDB: 18069 Background MDaemon is an e-mail server for Windows. Problem The IMAP service in MDaemon is affected by buffer overflow vulnerabilities in the AUTHENTICATE LOGIN and AUTHENTICATE CRAM-MD5 commands which can be exploited without logging into the server...
mb_send_mail() PHP safe mode protection bypass
mbsendmail and imap unfctions allow to access system files...
MDaemon IMAP AUTHENTICATE command buffer overflow
Added: 03/01/2006 BID: 14317 OSVDB: 18069 Background MDaemon is an e-mail server for Windows. Problem The IMAP service in MDaemon is affected by buffer overflow vulnerabilities in the AUTHENTICATE LOGIN and AUTHENTICATE CRAM-MD5 commands which can be exploited without logging into the server...
MDaemon IMAP AUTHENTICATE command buffer overflow
Added: 03/01/2006 BID: 14317 OSVDB: 18069 Background MDaemon is an e-mail server for Windows. Problem The IMAP service in MDaemon is affected by buffer overflow vulnerabilities in the AUTHENTICATE LOGIN and AUTHENTICATE CRAM-MD5 commands which can be exploited without logging into the server...