Lucene search
+L

119 matches found

OSV
OSV
added 2017/10/23 12:49 p.m.9 views

USN-3457-1 curl vulnerability

Brian Carpenter discovered that curl incorrectly handled IMAP FETCH response lines. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code...

9.1CVSS7.4AI score0.06224EPSS
SaveExploits0References2
OSV
OSV
added 2017/10/23 12:00 a.m.11 views

UBUNTU-CVE-2017-1000257

An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that non-existing data with a pointer and the size zero to the deliver-data function. libcurl's deliver-data function treats zero as a mag...

9.1CVSS7.4AI score0.06224EPSS
SaveExploits0References5
Fedora
Fedora
added 2017/08/20 6:35 p.m.34 views

[SECURITY] Fedora 26 Update: cyrus-imapd-3.0.3-1.fc26

The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...

6.5CVSS0.5AI score0.01227EPSS
SaveExploits0
OSV
OSV
added 2017/04/12 11:59 p.m.6 views

DEBIAN-CVE-2017-7703

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly...

7.5CVSS7.5AI score0.03284EPSS
SaveExploits0References1
OSV
OSV
added 2017/04/12 11:59 p.m.12 views

UBUNTU-CVE-2017-7703

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly...

7.5CVSS7.1AI score0.03284EPSS
SaveExploits0References5
Fedora
Fedora
added 2010/07/08 6:28 p.m.33 views

[SECURITY] Fedora 13 Update: w3m-0.5.2-18.fc13

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...

6.8CVSS0.2AI score0.01491EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.20 views

Fedora Update for uw-imap FEDORA-2008-9396

Check for the Version of uw-imap OpenVAS Vulnerability Test Fedora Update for uw-imap FEDORA-2008-9396 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

10CVSS6.3AI score0.06355EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.60 views

Fedora Update for uw-imap FEDORA-2008-9383

Check for the Version of uw-imap OpenVAS Vulnerability Test Fedora Update for uw-imap FEDORA-2008-9383 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

10CVSS6.3AI score0.06355EPSS
SaveExploits0References2
Fedora
Fedora
added 2007/01/15 4:25 p.m.26 views

[SECURITY] Fedora Core 6 Update: w3m-0.5.1-15.fc6

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...

0.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2004/07/06 12:00 a.m.28 views

RHEL 2.1 : im (RHSA-2003:038)

Updated Internet Message packages are available that fix the insecure handling of temporary files. Updated 9 April 2003 Added packages for Red Hat Linux Advanced Workstation, Red Hat Enterprise Linux ES, and Red Hat Enterprise Linux WS. Internet Message IM consists of a set of user interface...

2.1CVSS5.4AI score0.00371EPSS
SaveExploits0References4
OSV
OSV
added 2003/06/16 4:00 a.m.19 views

DEBIAN-CVE-2003-0297

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service crash and possibly execute arbitrary code via certain large 1 literal and 2 mailbox size values that cause either integer signedness errors or integer overflow errors...

7.5CVSS8.1AI score0.02741EPSS
SaveExploits0References1
OSV
OSV
added 2003/04/02 5:00 a.m.7 views

DEBIAN-CVE-2003-0167

Multiple off-by-one buffer overflows in the IMAP capability for Mutt 1.3.28 and earlier, and Balsa 1.2.4 and earlier, allow a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a specially crafted mail folder, a different vulnerability than...

7.5CVSS8AI score0.02543EPSS
SaveExploits0References1
OSV
OSV
added 2003/03/24 5:00 a.m.6 views

DEBIAN-CVE-2003-0140

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service crash and possibly execute arbitrary code via a crafted folder...

7.5CVSS8AI score0.04494EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2003/02/26 7:46 p.m.23 views

Low: Red Hat Security Advisory: im security update

Updated Internet Message packages are available that fix the insecure handling of temporary files. Updated 9 April 2003 Added packages for Red Hat Linux Advanced Workstation, Red Hat Enterprise Linux ES, and Red Hat Enterprise Linux WS. Internet Message IM consists of a set of user interface...

2.1CVSS5.7AI score0.00371EPSS
SaveExploits0References3
NVD
NVD
added 2003/01/17 5:00 a.m.27 views

CVE-2002-1395

Internet Message IM 141-18 and earlier uses predictable file and directory names, which allows local users to 1 obtain unauthorized directory permissions via a temporary directory used by impwagent, and 2 overwrite and create arbitrary files via immknmz...

2.1CVSS6.2AI score0.00371EPSS
SaveExploits0References7
OSV
OSV
added 2003/01/17 5:00 a.m.13 views

CVE-2002-1395

Internet Message IM 141-18 and earlier uses predictable file and directory names, which allows local users to 1 obtain unauthorized directory permissions via a temporary directory used by impwagent, and 2 overwrite and create arbitrary files via immknmz...

6.1AI score
SaveExploits0References8
CVE
CVE
added 2003/01/08 5:00 a.m.78 views

CVE-2002-1395

CVE-2002-1395 affects Internet Message (IM) and its components impwagent and immknmz. The Debian advisory notes insecure handling of temporary files: impwagent creates a temporary directory in /tmp with predictable names, allowing local users to obtain unauthorized directory permissions, and immk...

2.1CVSS6.1AI score0.00371EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2003/01/08 5:00 a.m.36 views

CVE-2002-1395

Internet Message IM 141-18 and earlier uses predictable file and directory names, which allows local users to 1 obtain unauthorized directory permissions via a temporary directory used by impwagent, and 2 overwrite and create arbitrary files via immknmz...

2.1CVSS6.1AI score0.00371EPSS
SaveExploits0
Cvelist
Cvelist
added 2003/01/08 5:00 a.m.41 views

CVE-2002-1395

Internet Message IM 141-18 and earlier uses predictable file and directory names, which allows local users to 1 obtain unauthorized directory permissions via a temporary directory used by impwagent, and 2 overwrite and create arbitrary files via immknmz...

6.2AI score0.00371EPSS
SaveExploits0References7
Rows per page
Query Builder