23 matches found
EUVD-2021-7686
Malicious code in bioql PyPI...
SUSE CVE-2010-4717
Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long 1 LIST or 2 LSUB command...
SUSE CVE-2021-20247
A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the...
Denial Of Service (DoS)
Alpine is vulnerable to denial of service. The vulnerability exists when LIST or LSUB is sent before STARTTLS which allows an attacker to cause an application crash...
DEBIAN-CVE-2021-46853
Alpine before 2.25 allows remote attackers to cause a denial of service application crash when LIST or LSUB is sent before STARTTLS...
UBUNTU-CVE-2021-46853
Alpine before 2.25 allows remote attackers to cause a denial of service application crash when LIST or LSUB is sent before STARTTLS...
CVE-2021-46853
Alpine before 2.25 allows remote attackers to cause a denial of service application crash when LIST or LSUB is sent before STARTTLS...
CVE-2021-46853
CVE-2021-46853 affects Alpine prior to 2.25. A remote attacker can cause an application crash (denial of service) by sending LIST or LSUB before STARTTLS. This issue arises from how the IMAP/mail handling processes pre-TLS commands, enabling a crash under network conditions. The connected documen...
Design/Logic Flaw
A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the...
Huawei Vicky-AL00A and Victoria-AL00A cell phones isub denial of service vulnerability
The Huawei Vicky-AL00A and Victoria-AL00A are both smartphone devices from the Chinese company Huawei Huawei. A denial of service vulnerability exists in the lsub service in the Huawei Vicky-AL00A Vicky-AL00AC00B157 prior and Victoria-VL00A Victoria-VL00AC00B157 prior, which stems from a program...
SurgeMail 3.8 - IMAP LSUB Command Remote Stack Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28377/info SurgeMail is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Successfully exploiting this issue may allow remote attackers to execute...
University of Washington - imap LSUB Buffer Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CVE-2008-1497
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command...
SurgeMail buffer overflow
Buffer overflow in LSUB IMAP command...
Surgemail 3.8 - IMAP LSUB Command Remote Stack Buffer Overflow
source: https://www.securityfocus.com/bid/28377/info SurgeMail is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary machine code in the conte...
CVE-2007-3510.pl.txt
!perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to 0x7e! printable ASCII characters You must use a...
IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit
No description provided by source. !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler...
IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command
!perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to 0x7e! printable ASCII characters You must use a...
IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command
IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to...
IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit
Exploit for unknown platform in category remote exploits =========================================================== IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit =========================================================== !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit...