5310 matches found
By the PHP imap function to bypass safe mode and open_basedir restrictions vulnerability thought-the vulnerability of early warning-the black bar safety net
Last night in the green League saw this vulnerability announcement, 2 on 2 8, released, is imapopen of the module exists on the vulnerability, a local attacker could use this vulnerability to unauthorized traversal of the mail directory, illegal create, delete, playback command file. The most...
IMail IMAP FETCH command buffer overflow
Added: 03/15/2006 CVE: CVE-2005-3526 BID: 17063 OSVDB: 23796 Background IMail is a mail server for Windows including SMTP, IMAP, and LDAP services. Problem A buffer overflow vulnerability in IMail allows remote authenticated attackers to execute arbitrary commands by sending a specially crafted...
IMail IMAP FETCH command buffer overflow
Added: 03/15/2006 CVE: CVE-2005-3526 BID: 17063 OSVDB: 23796 Background IMail is a mail server for Windows including SMTP, IMAP, and LDAP services. Problem A buffer overflow vulnerability in IMail allows remote authenticated attackers to execute arbitrary commands by sending a specially crafted...
IMail IMAP FETCH command buffer overflow
Added: 03/15/2006 CVE: CVE-2005-3526 BID: 17063 OSVDB: 23796 Background IMail is a mail server for Windows including SMTP, IMAP, and LDAP services. Problem A buffer overflow vulnerability in IMail allows remote authenticated attackers to execute arbitrary commands by sending a specially crafted...
IMail IMAP FETCH command buffer overflow
Added: 03/15/2006 CVE: CVE-2005-3526 BID: 17063 OSVDB: 23796 Background IMail is a mail server for Windows including SMTP, IMAP, and LDAP services. Problem A buffer overflow vulnerability in IMail allows remote authenticated attackers to execute arbitrary commands by sending a specially crafted...
CVE-2005-3526
The CVE-2005-3526 issue affects Ipswitch Collaboration Suiteās IMAP daemon (Ipswitch IMail Server/Collaboration Suite) identified in versions 2006.02 and earlier. The vulnerability stems from a lack of bounds checking while parsing long arguments to the FETCH command, enabling remote authenticate...
CVE-2005-3526
Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrary code via a long FETCH command...
GLSA-200603-09 : SquirrelMail: XSS and IMAP command injection
The remote host is affected by the vulnerability described in GLSA-200603-09 SquirrelMail: XSS and IMAP command injection SquirrelMail does not validate the rightframe parameter in webmail.php, possibly allowing frame replacement or cross-site scripting CVE-2006-0188. Martijn Brinkers and Scott...
IPSwitch IMail IMAP mail server DoS
FETCH IMAP command processing DoS and code execution...
[Full-disclosure] ZDI-06-003: Ipswitch Collaboration Suite Code Execution Vulnerability
ZDI-06-003: Ipswitch Collaboration Suite Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-003.html March 13, 2006 -- CVE ID: CVE-2005-3526 -- Affected Vendor: Ipswitch -- Affected Products: Ipswitch Collaboration Suite 2006.02 and below -- TippingPointTM IPS Custome...
Kerio MailServer IMAP mail server DoS
Crash on IMAP Login command like a001 LOGIN 4294967294...
Ipswitch Multiple Products < 2006.03 IMAP FETCH Command Overflow
Binary data 3473.prm...
[Full-disclosure] Kerio MailServer bugfun
Hi, It should be noted that ProtoVer Sample IMAP testsuite has been released with 3 unpublished bugs. Now it looks like that Kerio MailServer preauth bug has been fixed. Kerio MailServer 6.1.3 changelog: """ Version 6.1.3 Patch 1 - March 9, 2006 - Fixed possible crash when handling special crafte...
Ipswitch Collaboration Suite Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ipswitch Collaboration Suite. Authentication is required to exploit this vulnerability. This specific flaw exists within the IMAP daemon. A lack of bounds checking during the parsing of long...
Kerio MailServer IMAP Server Crafted LOGIN Command DoS
The remote host is running Kerio MailServer, a commercial mail server available for Windows, Linux, and Mac OS X platforms. The installed version of Kerio MailServer terminates abnormally when it receives certain malformed IMAP LOGIN commands. An unauthenticated, remote attacker can exploit this...
Ipswitch IMail Server/Collaboration Suite IMAP FETCH Command Overflow
The remote host is running Ipswitch Collaboration Suite / IMail Secure Server / IMail Server, commercial messaging and collaboration suites for Windows. According to its banner, the version of Ipswitch Collaboration Suite / IMail Secure Server / IMail Server installed on the remote host has a...
Command injection
Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service application crash via a crafted IMAP LOGIN command...
CVE-2006-1158
Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service application crash via a crafted IMAP LOGIN command...
CVE-2006-1158
CVE-2006-1158 affects Kerio MailServer prior to 6.1.3 Patch 1. An unauthenticated remote attacker can trigger a denial of service (application crash) by sending a crafted IMAP LOGIN command. The issue is caused by handling of certain malformed IMAP LOGIN inputs, leading to service disruption. Pub...