Eudora WorldMail IMAPd UID Command Buffer Overflow Vulnerability

Added: 03/06/2014 BID: 65650 OSVDB: 104071 Background Eudora WorldMail is an e-mail server for Windows. Problem Eudora WorldMail version 9.0.333.0 and probably earlier IMAPd service is vulnerable to buffer overflow as a result of improper validation of user-supplied input when handling UID...

Eudora WorldMail IMAPd UID Command Buffer Overflow Vulnerability

Added: 03/06/2014 BID: 65650 OSVDB: 104071 Background Eudora WorldMail is an e-mail server for Windows. Problem Eudora WorldMail version 9.0.333.0 and probably earlier IMAPd service is vulnerable to buffer overflow as a result of improper validation of user-supplied input when handling UID...

Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service UID - Buffer Overflow

Exploit for windows platform in category remote exploits !/usr/bin/python import sys,socket banner = """ Coded by: Muhammad EL Harmeel m.harmeelatgmaildotcom Details: - PRE AUTHENTICATION Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service Preauthentication Buffer Overflow. - Tested on: Windows...

Eudora Qualcomm WorldMail 9.0.333.0 - IMAPd Service UID Buffer Overflow

Eudora Qualcomm WorldMail 9.0.333.0 - IMAPd Service UID Buffer Overflow !/usr/bin/python Tested on 6.1.19.0 import sys,socket banner = """ Coded by: Muhammad Alharmeel Details: - PRE AUTHENTICATION Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service Preauthentication Buffer Overflow. - Tested on:...

Eudora Qualcomm WorldMail 9.0.333.0 - IMAPd Service UID Buffer Overflow

!/usr/bin/python Tested on 6.1.19.0 import sys,socket banner = """ Coded by: Muhammad Alharmeel Details: - PRE AUTHENTICATION Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service Preauthentication Buffer Overflow. - Tested on: Windows Server 2003 SP1. - SEH gets overwritten at 749 bytes when using U...

Amazon Linux AMI : cyrus-imapd (ALAS-2011-27)

An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials...

Amazon Linux AMI : cyrus-impad (ALAS-2011-02)

The MITRE CVE database describes CVE-2011-3208 as : A buffer overflow flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to crash the nntpd child process or, possibly, execute arbitrary code with the privileges of the cyrus user. ...

Oracle Linux 5 : cyrus-imapd (ELSA-2009-1116)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1116 advisory. 2.3.7-2.2 - add -fno-strict-aliasing to cflags 2.3.7-2.1 - fix saslencode64's buffers 505427 Tenable has extracted the preceding description block directly from...

Oracle Linux 5 / 6 : cyrus-imapd (ELSA-2011-1317)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1317 advisory. 2.3.16-6.3 - Resolves: 735391 - CVE-2011-3208 nntpd buffer overflow Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : cyrus-imapd (ELSA-2009-1459)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1459 advisory. - fix more buffer overflows in cyrus sieve CVE-2009-3235 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 5 / 6 : cyrus-imapd (ELSA-2011-0859)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0859 advisory. 2.3.16-6.2 - do not use strict aliasing 2.3.16-6.1 - fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability Tenable has extracted the precedi...

Oracle Linux 5 / 6 : cyrus-imapd (ELSA-2011-1508)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1508 advisory. - fix CVE-2011-3481: NULL pointer dereference via crafted References header in email 738391 Tenable has extracted the preceding description block...

CentOS 4 : nfs-utils (CESA-2009:0955)

An updated nfs-utils package that fixes a security issue and multiple bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and...

Fedora Core 3 : cyrus-imapd-2.2.12-1.1.fc3 (2005-339)

Several buffer overflow bugs were found in cyrus-imapd. It is possible that an authenticated malicious user could cause the imap server to crash. Additionally, a peer news admin could potentially execute arbitrary code on the imap server when news is received using the fetchnews command. The Comm...

Slackware Advisory SSA:2005-310-06 imapd

The remote host is missing an update as announced via advisory SSA:2005-310-06. OpenVAS Vulnerability Test $Id: esoftslkssa200531006.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2005-310-06)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for cyrus-imapd MDVSA-2012:037 (cyrus-imapd)

Check for the Version of cyrus-imapd OpenVAS Vulnerability Test Mandriva Update for cyrus-imapd MDVSA-2012:037 cyrus-imapd Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for cyrus-imapd MDVSA-2012:037 (cyrus-imapd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Scientific Linux Security Update : cyrus-imapd on SL4.x, SL5.x i386/x86_64

CVE-2009-2632 cyrus-imapd: buffer overflow in cyrus sieve CVE-2009-3235 cyrus-impad: CMU sieve buffer overflows Multiple buffer overflow flaws were found in the Cyrus IMAP Sieve implementation. An authenticated user able to create Sieve mail filtering rules could use these flaws to execute...

Scientific Linux Security Update : cyrus-imapd on SL4.x, SL5.x i386/x86_64

It was discovered that the Cyrus SASL library cyrus-sasl does not always reliably terminate output from the saslencode64 function used by programs using this library. The Cyrus IMAP server cyrus-imapd relied on this function's output being properly terminated. Under certain conditions, improperly...