UoW imapd (UW-IMAP) Multiple Command Remote Overflows (2)

There is a buffer overflow in the remote imap server which allows an authenticated user to obtain a remote shell. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10374; scriptversion "1.28"; scriptcveid"CVE-2000-0284"; scriptbugtraqid1110; scriptnameenglish:"UoW imapd...

CVE-2000-0284

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands...

UoW IMAPd Server 10.234/12.264 - LSUB Buffer Overflow (Metasploit)

source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes possible to execute code on the machine. Executing the list command...

UoW IMAPd Serve 10.23412.264 - COPY Buffer Overflow (Metasploit)

UoW IMAPd Serve 10.23412.264 - COPY Buffer Overflow Metasploit source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes...

UoW IMAPd Server 10.23412.264 - LSUB Buffer Overflow (Metasploit)

UoW IMAPd Server 10.23412.264 - LSUB Buffer Overflow Metasploit source: https://www.securityfocus.com/bid/1110/info A buffer overflow exists in imapd. The vulnerability exists in the list command. By supplying a long, well-crafted string as the second argument to the list command, it becomes...

imapd4.txt

Date: Fri, 17 Jul 1998 00:06:30 +0200 From: Anonymous Subject: EMERGENCY: new remote root exploit in UW imapd INTRODUCTION On July 10, 1998 a message was posted to the University of Washington Pine mailing lists about a security problem in the UW imapd server released with Pine 4.00, viewable at:...

Ipswitch IMail 5.0 - Imapd Buffer Overflow (Denial of Service) (PoC)

Ipswitch IMail 5.0 - Imapd Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/502/info The imapd login process is susceptible to a buffer overflow attack which will crash the service. Telnet to target machine, port 143 OK IMAP4 Server IMail 4.06 X LOGIN glob1 glob2...

Ipswitch IMail 5.0 - Imapd Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/502/info The imapd login process is susceptible to a buffer overflow attack which will crash the service. Telnet to target machine, port 143 OK IMAP4 Server IMail 4.06 X LOGIN glob1 glob2 Where glob1 is 1200 characters and glob2 is 1300 characters...

Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow

Netscape Messaging Server 3.55 University of Washington imapd 10.234 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to ...

Netscape Messaging Server 3.55 & University of Washington imapd 10.234 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to be executed will be run with root privilege. Imap supports a command 'AUTHENTICATE' which...

CVE-1999-1445

Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords...

Linux imapd Remote Overflow File Retrieve Exploit

Exploit for linux platform in category remote exploits ================================================= Linux imapd Remote Overflow File Retrieve Exploit ================================================= / This is the remote exploit of the hole in the imap daemon, for Linux. The instruction code...

Linux imapd - Remote Overflow / File Retrieve

/ This is the remote exploit of the hole in the imap daemon, for Linux. The instruction code is doing open, write, and close system calls, and it adds a line root::0:0.. at the beggining of /etc/passwd change to /etc/shadow if needed. The code needs to be self modifying since imapd turns everythi...