UoW imapd (UW-IMAP) AUTHENTICATE Command Remote Overflow

Binary data 1101.prm...

UoW imapd (UW-IMAP) v12 Multiple Command Remote Overflows

Binary data 1087.prm...

SUSE-SA:2002:048: cyrus-imapd

The remote host is missing the patch for the advisory SUSE-SA:2002:048 cyrus-imapd. The cyrus imapd contains a buffer overflow which could be exploited by remote attackers prior to logging in. Attackers could generate oversized error messages and overflow buffers inside imapd. Additionally to thi...

CVE-2003-1322

Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long 1 EXAMINE, 2 DELETE, 3 SUBSCRIBE, 4 RENAME, 5 UNSUBSCRIBE, 6 LIST, 7 LSUB, 8 STATUS, 9 LOGIN, 10 CREATE, or 11 SELECT command...

Cyrus IMAPD 1.41.5.192.0.122.0.162.1.92.1.10 - Pre-Login Heap Corruption

Cyrus IMAPD 1.41.5.192.0.122.0.162.1.92.1.10 - Pre-Login Heap Corruption source: https://www.securityfocus.com/bid/6298/info Cyrus IMAPD is a freely available, open source Interactive Mail Access Protocol IMAP daemon. It is available for Unix and Linux operating systems. It has been reported that...

Cyrus IMAPD 1.4/1.5.19/2.0.12/2.0.16/2.1.9/2.1.10 - Pre-Login Heap Corruption

source: https://www.securityfocus.com/bid/6298/info Cyrus IMAPD is a freely available, open source Interactive Mail Access Protocol IMAP daemon. It is available for Unix and Linux operating systems. It has been reported that Cyrus IMAPD does not sufficiently handle overly long strings. In some...

UoW IMAPd Server 10.23412.264 - Remote Buffer Overflow

UoW IMAPd Server 10.23412.264 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes possible t...

UoW IMAPd Server 10.234/12.264 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes possible to execute code on the machine. Executing the list comma...

WU-IMAPd 20002001 - Partial Mailbox Attribute Remote Buffer Overflow (2)

WU-IMAPd 20002001 - Partial Mailbox Attribute Remote Buffer Overflow 2 // source: https://www.securityfocus.com/bid/4713/info Wu-imapd is vulnerable to a buffer overflow condition. This has been reported to occur when a valid user requests partial mailbox attributes. Exploitation may result in th...

WU-IMAPd 2000/2001 - Partial Mailbox Attribute Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/4713/info Wu-imapd is vulnerable to a buffer overflow condition. This has been reported to occur when a valid user requests partial mailbox attributes. Exploitation may result in the execution of arbitrary code as the server process. An attacker may al...

CVE-2001-0691

Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations...

CVE-1999-1445

Vulnerability details available for CVE-1999-1445: affected software includes imapd and ipop3d running on Slackware 3.4 and 3.3 with shadowing enabled (and possibly other OSes). The issue allows remote attackers to trigger a core dump by sending a short sequence of USER and PASS commands that do ...

CVE-2001-0691

UW-IMAP imapd (Washington University) v2000a–2000c contains buffer overflows that could allow a local user, after authentication, to execute code with that user’s privileges in certain configurations. Mandrake MDKSA-2001:054 notes these vulnerabilities and that updates are provided, but the exact...

CVE-2001-0691

Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations...

Ошибка между imapd И mail.local

Hello, Надеюсь, что хотя бы из чувства патриотизма может быть еще кто-нибудь в дальнейшем решится писать в этот список рассылки до или хотя бы одновременно публикации в Bugtraq : Ошибка несерьезная, но достаточно интересная. Дело в том, что в данном случае ни одна из программ не содержит явной...

CVE-2000-0284

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands...

CVE-2000-0284

The CVE-2000-0284 issue affects University of Washington IMAP Server (UW-IMAP) imapd, specifically involving a buffer overflow in processing command arguments (e.g., LIST, LSUB) that can be triggered by a valid user. The vulnerability enables an authenticated user to potentially execute arbitrary...

Переполнение буфера в WU-IMAPD

Переполнение буфера в команде list "" buffer после авторизации пользователя. Пользователь не сможет повысить привелегии, но это позволяет пользователю имеющему только почтовый доступ получить шел-доступ к машине...

Re: another WU imapd buffer overflow

Hi again, imapd seems to be very weak. I've found another three buffer overruns. This time affected commands are LSUB, RENAME and FIND: OK mail IMAP4rev1 v12.264 server ready login siva9 secret OK LOGIN completed lsub "" AAAAAAAAAAAAA.... A 1024 - 8179 SIGSEGV received. OK localhost IMAP4rev1...

another WU imapd buffer overflow

Hi, While doing code security audit, I discovered another buffer overflow in imapd. This time security flaw exist in standard rfc 1064 COPY command: OK mail IMAP4rev1 v12.264 server ready login siva9 secret OK LOGIN completed select inbox 2 EXISTS 0 RECENT OK UIDVALIDITY 956162550 UID validity...