CVE-2024-34020

A stack-based buffer overflow was found in the putSDN function of mail.c in hcode through 2.1...

CVE-2024-34020

A stack-based buffer overflow was found in the putSDN function of mail.c in hcode through 2.1...

CVE-2024-34020

A stack-based buffer overflow was found in the putSDN function of mail.c in hcode through 2.1...

hcode -- buffer overflow in mail.c

The openSUSE project reports: The problematic function in question is putSDN in mail.c. The static variable cp is used as an index for a fixed-sized buffer ibuf. There is a range check: if cp = HDRBUFLEN ... but under certain circumstances, cp can be incremented beyond the buffer size, leading to...

CVE-2024-34020

CVE-2024-34020 is a stack-based buffer overflow in hcode’s mail.c putSDN() function, affecting hcode up to version 2.1. The root cause is a boundary mishandling of a static index (cp) into a fixed buffer (ibuf) beyond HDR_BUF_LEN, enabling a potential memory overwrite. OpenSUSE notes fixes in hco...

CVE-2024-34020

A stack-based buffer overflow was found in the putSDN function of mail.c in hcode through 2.1...

PT-2024-25647 · Hcode · Hcode

Name of the Vulnerable Software and Affected Versions: hcode versions 2.1 and earlier Description: A stack-based buffer overflow was found in the putSDN function of mail.c. Recommendations: For hcode versions 2.1 and earlier, at the moment, there is no information about a newer version that...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

CVE-2005-2933 describes a buffer overflow in UW-IMAP (mail_valid_net_parse_work in mail.c) where a mailbox name containing a single quote (") without a closing quote can cause unchecked data to be copied, enabling remote code execution on servers using UW-IMAP and the c-client library. Public rep...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...