2062 matches found
CVE-2005-3143: Undefined Security Weakness
Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service crash via IMAP clients on Mac OS X 10.4 Mail 2...
imap-uw -- mailbox name handling remote buffer vulnerability
FrSIRT reports: A vulnerability has been identified in UW-IMAP, which could be exploited by remote attackers to execute arbitrary commands. This flaw is due to a stack overflow error in the "mailvalidnetparsework" src/c-client/mail.c function that does not properly handle specially crafted mailbo...
GNU Mailutils imap4d 0.6 (search) Remote Format String Exploit (fbsd)
No description provided by source. / Copyright c 2005 Rosiello Security http://www.rosiello.org Permission is granted for the redistribution of this software electronically. It may not be edited in any way without the express written consent of Rosiello Security. Disclaimer: The author published...
mutt mail agent buffer overflow
Buffer overflow on parsing messages from mailbox...
CVE-2004-2447
CVE-2004-2447 is a cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01. The issue allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to six endpoints: viewmail.tagz, the index script under /user/, members.tagz, general.tagz, advanced.tagz, ...
CVE-2004-2447: Undefined Security Weakness
Cross-site scripting XSS vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to 1 viewmail.tagz, 2 the index script under /user/, 3 members.tagz, 4 general.tagz, 5 advanced.tagz, or 6 list.tagz...
javamailAPI.txt
Javamail Multiple Information Disclosure Vulnerabilities May 25, 2005 Yangon, Myanmar. Vulnerable Systems: JavaMail API 1.3 JavaMail API 1.2 JavaMail API 1.1.3 Tested on Apache Tomcat/5.0.16 Possibly on all versions of Windows Failed to restrict to accessing other directory and files in...
CVE-2002-2082: Undefined Security Weakness
FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock the mailboxes of other users...
e-Post SPA-PRO 4.01 (imap) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ========================================================= e-Post SPA-PRO 4.01 imap Remote Buffer Overflow Exploit ========================================================= // // e-Post SPA-PRO Mail @Solomon SPA-IMAP4S 4.01 Service Buffer...
CVE-2005-1256
Stack-based buffer overflow in the IMAP daemon IMAPD32.EXE in IMail 8.13 in Ipswitch Collaboration Suite ICS, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name...
Unauthorized JavaMail mail server API mailbox access
It's possible to access different mailbox by mail number...
CVE-2004-1089
CVE-2004-1089 affects Apple Mac OS X 10.3.6 Server when using Kerberos authentication with Cyrus IMAP. The vulnerability, as described in the initial document, allows local users to access mailboxes of other users, indicating an information disclosure / mailbox access issue arising from the Cyrus...
CVE-2004-1089: Undefined Security Weakness
Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users...
cyrus-imapd -- multiple buffer overflow vulnerabilities
The Cyrus IMAP Server ChangeLog states: Fix possible single byte overflow in mailbox handling code. Fix possible single byte overflows in the imapd annotate extension. Fix stack buffer overflows in fetchnews exploitable by peer news server, backend exploitable by admin, and in imapd exploitable b...
Eudora mail reader multiple vulnerabilities
Multiple vulnerabilities lead to ability of code execution with specially crafted e-mail message of mailbox file...
UW-imapd fails to properly authenticate users when using CRAM-MD5
Overview A vulnerablility in an authentication method for the University of Washington IMAP server could allow a remote attacker to access any user's mailbox. Description The Internet Message Access Protocol IMAP is a method of accessing electronic messages kept on a remote mail server and is...
MDaemon IMAP Service CREATE Command Mailbox Name Handling Overflow
Binary data 1094.prm...
security flaw
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php...
CVE-2004-0519: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php...