MailEnable IMAP mailbox name buffer overflow

Added: 11/29/2005 CVE: CVE-2005-3690 BID: 15492 OSVDB: 20929 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem A buffer overflow in the...

CVE-2005-3690: Undefined Security Weakness

Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...

CVE-2005-3691: Undefined Security Weakness

Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...

WorldMail IMAP Server Traversal Arbitrary Mail Spool Access

The remote host is running Eudora WorldMail, a commercial mail server for Windows. The IMAP server bundled with the version of WorldMail installed on the remote host fails to filter directory traversal sequences from mailbox names and fails to restrict access to mailboxes within its spool area. A...

Sendmail < 8.10.0 mail.local DoS Vulnerability

mail.local in the remote Sendmail server, according to its version number, does not properly identify the SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

IMAP UW mail server buffer overflow

Buffer overflow on oversized quoted string in mailbox name...

GLSA-200510-10 : uw-imap: Remote buffer overflow

The remote host is affected by the vulnerability described in GLSA-200510-10 uw-imap: Remote buffer overflow Improper bounds checking of user-supplied data while parsing IMAP mailbox names can lead to overflowing the stack buffer. Impact : Successful exploitation requires an authenticated IMAP us...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

DEBIAN-CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-3143

Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service crash via IMAP clients on Mac OS X 10.4 Mail 2...

CVE-2005-3143

Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service crash via IMAP clients on Mac OS X 10.4 Mail 2...

imap-uw -- mailbox name handling remote buffer vulnerability

FrSIRT reports: A vulnerability has been identified in UW-IMAP, which could be exploited by remote attackers to execute arbitrary commands. This flaw is due to a stack overflow error in the "mailvalidnetparsework" src/c-client/mail.c function that does not properly handle specially crafted mailbo...

CVE-2005-3143: Undefined Security Weakness

Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service crash via IMAP clients on Mac OS X 10.4 Mail 2...

GNU Mailutils imap4d 0.6 (search) Remote Format String Exploit (fbsd)

No description provided by source. / Copyright c 2005 Rosiello Security http://www.rosiello.org Permission is granted for the redistribution of this software electronically. It may not be edited in any way without the express written consent of Rosiello Security. Disclaimer: The author published...

mutt mail agent buffer overflow

Buffer overflow on parsing messages from mailbox...

CVE-2004-2447

CVE-2004-2447 is a cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01. The issue allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to six endpoints: viewmail.tagz, the index script under /user/, members.tagz, general.tagz, advanced.tagz, ...

CVE-2004-2447: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to 1 viewmail.tagz, 2 the index script under /user/, 3 members.tagz, 4 general.tagz, 5 advanced.tagz, or 6 list.tagz...