CVE-2001-0691

Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations...

Ошибка между imapd И mail.local

Hello, Надеюсь, что хотя бы из чувства патриотизма может быть еще кто-нибудь в дальнейшем решится писать в этот список рассылки до или хотя бы одновременно публикации в Bugtraq : Ошибка несерьезная, но достаточно интересная. Дело в том, что в данном случае ни одна из программ не содержит явной...

CVE-2000-0284

The CVE-2000-0284 issue affects University of Washington IMAP Server (UW-IMAP) imapd, specifically involving a buffer overflow in processing command arguments (e.g., LIST, LSUB) that can be triggered by a valid user. The vulnerability enables an authenticated user to potentially execute arbitrary...

CVE-2000-0284

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands...

another WU imapd buffer overflow

Hi, While doing code security audit, I discovered another buffer overflow in imapd. This time security flaw exist in standard rfc 1064 COPY command: OK mail IMAP4rev1 v12.264 server ready login siva9 secret OK LOGIN completed select inbox 2 EXISTS 0 RECENT OK UIDVALIDITY 956162550 UID validity...

Re: another WU imapd buffer overflow

Hi again, imapd seems to be very weak. I've found another three buffer overruns. This time affected commands are LSUB, RENAME and FIND: OK mail IMAP4rev1 v12.264 server ready login siva9 secret OK LOGIN completed lsub "" AAAAAAAAAAAAA.... A 1024 - 8179 SIGSEGV received. OK localhost IMAP4rev1...

Переполнение буфера в WU-IMAPD

Переполнение буфера в команде list "" buffer после авторизации пользователя. Пользователь не сможет повысить привелегии, но это позволяет пользователю имеющему только почтовый доступ получить шел-доступ к машине...

UoW imapd (UW-IMAP) Multiple Command Remote Overflows (2)

There is a buffer overflow in the remote imap server which allows an authenticated user to obtain a remote shell. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10374; scriptversion "1.28"; scriptcveid"CVE-2000-0284"; scriptbugtraqid1110; scriptnameenglish:"UoW imapd...

CVE-2000-0284

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands...

UoW IMAPd Serve 10.23412.264 - COPY Buffer Overflow (Metasploit)

UoW IMAPd Serve 10.23412.264 - COPY Buffer Overflow Metasploit source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes...

UoW IMAPd Server 10.234/12.264 - LSUB Buffer Overflow (Metasploit)

source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes possible to execute code on the machine. Executing the list command...

UoW IMAPd Server 10.23412.264 - LSUB Buffer Overflow (Metasploit)

UoW IMAPd Server 10.23412.264 - LSUB Buffer Overflow Metasploit source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes...

imapd4.txt

Date: Fri, 17 Jul 1998 00:06:30 +0200 From: Anonymous Subject: EMERGENCY: new remote root exploit in UW imapd INTRODUCTION On July 10, 1998 a message was posted to the University of Washington Pine mailing lists about a security problem in the UW imapd server released with Pine 4.00, viewable at:...

Ipswitch IMail 5.0 - Imapd Buffer Overflow (Denial of Service) (PoC)

Ipswitch IMail 5.0 - Imapd Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/502/info The imapd login process is susceptible to a buffer overflow attack which will crash the service. Telnet to target machine, port 143 OK IMAP4 Server IMail 4.06 X LOGIN glob1 glob2...

Ipswitch IMail 5.0 - Imapd Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/502/info The imapd login process is susceptible to a buffer overflow attack which will crash the service. Telnet to target machine, port 143 OK IMAP4 Server IMail 4.06 X LOGIN glob1 glob2 Where glob1 is 1200 characters and glob2 is 1300 characters...

Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow

Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to ...

Netscape Messaging Server 3.55 & University of Washington imapd 10.234 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to be executed will be run with root privilege. Imap supports a command 'AUTHENTICATE' which...

CVE-1999-1445

Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords...

Linux imapd Remote Overflow File Retrieve Exploit

Exploit for linux platform in category remote exploits ================================================= Linux imapd Remote Overflow File Retrieve Exploit ================================================= / This is the remote exploit of the hole in the imap daemon, for Linux. The instruction code...

Linux imapd - Remote Overflow / File Retrieve

/ This is the remote exploit of the hole in the imap daemon, for Linux. The instruction code is doing open, write, and close system calls, and it adds a line root::0:0.. at the beggining of /etc/passwd change to /etc/shadow if needed. The code needs to be self modifying since imapd turns everythi...