Mandrake Linux Security Advisory : php-imap (MDKSA-2005:194)

'infamous41md' discovered a buffer overflow in uw-imap, the University of Washington's IMAP Server that allows attackers to execute arbitrary code. php-imap is compiled against the static c-client libs from imap. These packages have been recompiled against the updated imap development packages...

IMAP UW mail server buffer overflow

Buffer overflow on oversized quoted string in mailbox name...

MDKSA-2005:194 - Updated php-imap packages fix buffer overflow vulnerabilities.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:194 http://www.mandriva.com/security/ Package : php-imap Date : October 26, 2005 Affected: 10.1, 10.2, 2006.0, Corporate 2.1, Corporate 3.0 Problem Description: "infamous41md" discovered a buffer overflow in...

CVE-2004-2513

Buffer overflow in the IMAP service of Mercury Pegasus Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command...

CVE-2004-2513

The issue is CVE-2004-2513: a buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command. The connected CVE records confirm the affected product (Mercury/Pegasus Mail 4.01) and the root cause (IMAP buffer overflow...

CVE-2004-2501

CVE-2004-2501 describes a stack-based buffer overflow in MailEnable’s IMAP service (Professional 1.52 and Enterprise 1.01 and earlier). The vulnerability arises from improper boundary/IMAP data handling, allowing an unauthenticated remote attacker to cause a crash or execute arbitrary code by sen...

CVE-2004-2501

Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via 1 a long command string or 2 a long string to the MEIMAP service and then terminating the connection...

EUVD-2004-2504

Buffer overflow in the IMAP service of Mercury Pegasus Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command...

GLSA-200510-10 : uw-imap: Remote buffer overflow

The remote host is affected by the vulnerability described in GLSA-200510-10 uw-imap: Remote buffer overflow Improper bounds checking of user-supplied data while parsing IMAP mailbox names can lead to overflowing the stack buffer. Impact : Successful exploitation requires an authenticated IMAP us...

UW-IMAP vulnerable to a buffer overflow

Overview UW-IMAP contains a buffer overflow vulnerability that may allow a remote, authenticated attacker to execute arbitrary code on a vulnerable system. Description The University of Washington IMAP Server UW-IMAP is an email server that uses the Internet Message Access Protocol lMAP. A lack o...

CVE-2005-2661

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...

CVE-2005-2661

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...

CVE-2005-2661

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...

CVE-2005-2661

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

CVE-2005-2933 describes a buffer overflow in UW-IMAP (mail_valid_net_parse_work in mail.c) where a mailbox name containing a single quote (") without a closing quote can cause unchecked data to be copied, enabling remote code execution on servers using UW-IMAP and the c-client library. Public rep...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...