5310 matches found
CVE-2002-2215
The CVE-2002-2215 entry concerns PHP’s imap_header function in the IMAP functionality up to PHP 4.3.0. Affected component: PHP’s IMAP support; root cause: processing of an e-mail with a very large number of To addresses triggers an error path in rfc822_write_address, enabling a remote denial of s...
CVE-2003-1302
The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message with a 1 To or 2 From header with an address that contains a large number of "" backslash characters...
CVE-2002-2215
The imapheader function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of "To" addresses, which triggers an error in the rfc822writeaddress function...
CVE-2002-2214
The CVE-2002-2214 issue affects PHP’s IMAP MIME header decoding function (php_imap_mime_header_decode) prior to PHP 4.2.2. An attacker-supplied email header with an excessively long To field can crash PHP, causing a denial of service. Remediation is to upgrade PHP to version 4.2.2 or newer (as in...
CVE-2003-1303
CVE-2003-1303: Buffer overflow in imap_fetch_overview (php_imap.c) of PHP before 4.3.3 allows denial of service or potential code execution via long To/From headers. The vulnerability is reflected in multiple advisories (e.g., SUSE/RHSA/CESA) describing PHP updates fixing this and related issues;...
CVE-2003-1303
Buffer overflow in the imapfetchoverview function in the IMAP functionality phpimap.c in PHP before 4.3.3 allows remote attackers to cause a denial of service segmentation fault and possibly execute arbitrary code via a long e-mail address in a 1 To or 2 From header...
CVE-2003-1302
The CVE-2003-1302 issue affects PHP’s IMAP functionality (php-imap) prior to version 4.3.1, where processing an e-mail header (To or From) containing a large number of backslash characters could cause a remote denial of service. Connected advisories (SUSe/RH Red Hat, and CentOS-related entries) i...
Cyrus IMAP pop3d popsubfolders buffer overflow
Added: 06/12/2006 CVE: CVE-2006-2502 BID: 18056 OSVDB: 25853 Background Cyrus IMAP is an open-source IMAP, POP3, and KPOP server. The popsubfolders configuration option allows POP3 users to access subfolders by specifying the subfolder name when logging in. Problem When the popsubfolders...
Cyrus IMAP pop3d popsubfolders buffer overflow
Added: 06/12/2006 CVE: CVE-2006-2502 BID: 18056 OSVDB: 25853 Background Cyrus IMAP is an open-source IMAP, POP3, and KPOP server. The popsubfolders configuration option allows POP3 users to access subfolders by specifying the subfolder name when logging in. Problem When the popsubfolders...
Cyrus IMAP pop3d popsubfolders buffer overflow
Added: 06/12/2006 CVE: CVE-2006-2502 BID: 18056 OSVDB: 25853 Background Cyrus IMAP is an open-source IMAP, POP3, and KPOP server. The popsubfolders configuration option allows POP3 users to access subfolders by specifying the subfolder name when logging in. Problem When the popsubfolders...
Cyrus IMAP pop3d popsubfolders buffer overflow
Added: 06/12/2006 CVE: CVE-2006-2502 BID: 18056 OSVDB: 25853 Background Cyrus IMAP is an open-source IMAP, POP3, and KPOP server. The popsubfolders configuration option allows POP3 users to access subfolders by specifying the subfolder name when logging in. Problem When the popsubfolders...
CVE-2006-2308
Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the 1 CREATE, 2 SELECT, 3 DELETE, 4...
Directory traversal
Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the 1 CREATE, 2 SELECT, 3 DELETE, 4...
CVE-2006-2308
Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the 1 CREATE, 2 SELECT, 3 DELETE, 4...
CVE-2006-2308
The CVE-2006-2308 entry affects EServ/3 IMAP service (version 3.25). The vulnerability is a directory traversal in IMAP commands (CREATE, SELECT, DELETE, RENAME, COPY, APPEND) that allows remote authenticated users to read other users’ emails and manipulate directories (create/rename/remove). Roo...
IMail IMAP DELETE command buffer overflow
Added: 06/01/2006 CVE: CVE-2004-1520 BID: 11675 OSVDB: 11838 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow in the IMAP service could allow remote attackers to execute commands by sending a long, specially crafted DELETE command. The attacker would need to...
IMail IMAP DELETE command buffer overflow
Added: 06/01/2006 CVE: CVE-2004-1520 BID: 11675 OSVDB: 11838 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow in the IMAP service could allow remote attackers to execute commands by sending a long, specially crafted DELETE command. The attacker would need to...
IMail IMAP DELETE command buffer overflow
Added: 06/01/2006 CVE: CVE-2004-1520 BID: 11675 OSVDB: 11838 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow in the IMAP service could allow remote attackers to execute commands by sending a long, specially crafted DELETE command. The attacker would need to...
