Moderate: Red Hat Security Advisory: cyrus-imapd security update

Updated cyrus-imapd packages that fix several buffer overflow security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-imapd package contains the core of the Cyrus IMAP server. Several buffer overflow bugs we...

security flaw

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via 1 an off-by-one error in the imapd annotate extension, 2 an off-by-one error in "cached header handling," 3 a stack-based buffer overflow in fetchnews, or 4 a stack-based buffer overflow in...

RHEL 4 : cyrus-imapd (RHSA-2005:408)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:408 advisory. The cyrus-imapd package contains the core of the Cyrus IMAP server. Several buffer overflow bugs were found in cyrus-imapd. It is possible that an...

CVE-2005-0546

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via 1 an off-by-one error in the imapd annotate extension, 2 an off-by-one error in "cached header handling," 3 a stack-based buffer overflow in fetchnews, or 4 a stack-based buffer overflow in...

CVE-2005-0546

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via 1 an off-by-one error in the imapd annotate extension, 2 an off-by-one error in "cached header handling," 3 a stack-based buffer overflow in fetchnews, or 4 a stack-based buffer overflow in...

CVE-2005-1015

Buffer overflow in MailEnable Imapd MEIMAP.exe allows remote attackers to execute arbitrary code via a long LOGIN command...

CVE-2005-1015

Buffer overflow in MailEnable Imapd MEIMAP.exe allows remote attackers to execute arbitrary code via a long LOGIN command...

CVE-2005-1015

MailEnable Imapd (MEIMAP.exe) is affected by a buffer overflow vulnerability triggered by a long LOGIN command. The issue allows remote code execution and is tracked as CVE-2005-1015. Public sources (including Red Hat and NVD entries) describe the flaw as arising from a buffer overflow in the IMA...

Re: [Full-disclosure] MailEnable Imapd remote BoF + Exploit [x0n3-h4ck]

If you care at all about security, run, don't walk, away from this software. Another simple overflow via the "LOGIN" IMAP command: A001 LOGIN 1024 bytesrn -HD On Tuesday 05 April 2005 12:31, expanders wrote: -=+ Application: Mail Enable Imapd MEIMAP.exe Full-Disclosure - We believe in it. Charter...

MailEnable Enterprise 1.x Imapd Remote Exploit

No description provided by source. / +--=--------------------------x0n3-h4ck Team Presents---------------------------=--+ +--= =--+ +--= MailEnable Enterprise = 1.04Professional = 1.54 remote Imapd exploit =--+ +--= =--+ +--= Bug discovered by..: Corryl [email protected] =--+ +--= Exploit coded...

MailEnable Enterprise 1.x Imapd Remote Exploit

Exploit for linux platform in category remote exploits ============================================== MailEnable Enterprise 1.x Imapd Remote Exploit ============================================== / +--=--------------------------x0n3-h4ck Team Presents---------------------------=--+ +--= =--+ +--=...

MailEnable Enterprise 1.x - IMAPd Remote Overflow

MailEnable Enterprise 1.x - IMAPd Remote Overflow / +--=--------------------------x0n3-h4ck Team Presents---------------------------=--+ +--= =--+ +--= MailEnable Enterprise include include include include include include include include include include / Connectback Shellcode ::: 316 byte Link...

MailEnable Enterprise 1.x - IMAPd Remote Overflow

/ +--=--------------------------x0n3-h4ck Team Presents---------------------------=--+ +--= =--+ +--= MailEnable Enterprise include include include include include include include include include include / Connectback Shellcode ::: 316 byte Link points: Ip : 111 unsigned long xored 0x99999999 Por...

Cyrus imapd 2.2.4 - 2.2.8 (imapmagicplus) Remote Exploit

Exploit for linux platform in category remote exploits ======================================================== Cyrus imapd 2.2.4 - 2.2.8 imapmagicplus Remote Exploit ======================================================== / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x /...

Cyrus imapd 2.2.4 - 2.2.8 (imapmagicplus) Remote Exploit

No description provided by source. / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x / unl0ck Bug found by Stefan Esser www.unl0ck.org / www.coredumped.info [email protected] / [email protected] Greets to: all GOTFault ex-member, unl0ck, scozar, eos-india, xesio and all my...

Cyrus imapd 2.2.4 2.2.8 - imapmagicplus Remote Overflow

Cyrus imapd 2.2.4 2.2.8 - imapmagicplus Remote Overflow / Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x / unl0ck Bug found by Stefan Esser www.unl0ck.org / www.coredumped.info [email protected] / [email protected] Greets to: all GOTFault ex-member, unl0ck, scozar, eos-indi...

Cyrus imapd 2.2.4 < 2.2.8 - 'imapmagicplus' Remote Overflow

/ Cyrus imapd v 2.2.4 - 2.2.8 imapmagicplus Remote Exploit By crash-x / unl0ck Bug found by Stefan Esser www.unl0ck.org / www.coredumped.info [email protected] / [email protected] Greets to: all GOTFault ex-member, unl0ck, scozar, eos-india, xesio and all my other friends Thanks to: n2n Why: Th...

CVE-2002-1604

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to 1 csh, 2 dtsession, 3 dxsysinfo, 4 imapd, 5 inc, 6 uucp, 7 uux, 8 rdist, or 9 deliver...

Mandrake Linux Security Advisory : cyrus-imapd (MDKSA-2005:051)

Several overruns have been fixed in the IMAP annote extension as well as in cached header handling which can be run by an authenticated user. As well, additional bounds checking in fetchnews was improved to avoid exploitation by a peer news admin. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2005-0546

CVE-2005-0546 concerns multiple buffer overflows in Cyrus IMAPd before 2.2.11. The vulnerability affects the Cyrus IMAP server component imapd and related fetchnews and header handling paths, including an off-by-one in the imapd annotate extension and stack-based overflows in fetchnews and cached...