DEBIAN-CVE-2004-2460

Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service application crash via an "infinite" Unique IDentification Listing UIDL list...

CVE-2004-2460

Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service application crash via an "infinite" Unique IDentification Listing UIDL list...

[SA12445] gnubiff POP3 Buffer Overflow and Denial of Service Vulnerabilities

TITLE: gnubiff POP3 Buffer Overflow and Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA12445 VERIFY ADVISORY: http://secunia.com/advisories/12445/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: gnubiff 1.x http://secunia.com/product/3867/ DESCRIPTION:...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-1999-1164

Microsoft Outlook client is affected by CVE-1999-1164, where processing multiple email messages with identical X-UIDL headers can cause the application to hang, resulting in a denial of service. The available documents confirm the DoS impact but do not provide concrete remediation steps or patche...

CVE-1999-1164

Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang...

CVE-2000-0501

Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server...

CVE-2000-0501

MDaemon 2.8.5.0 POP server is affected by a race condition that can cause a denial of service when a UIDL command is issued and the server is exited rapidly. The issue is described as a local DoS with partial availability impact and a low CVSS. No exploitation details are provided in the availabl...

CVE-2000-0501

Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server...

Alt-N MDaemon 2.8.5 - UIDL Denial of Service

Alt-N MDaemon 2.8.5 - UIDL Denial of Service source: https://www.securityfocus.com/bid/1366/info A remote user is capable of crashing Alt-N MDaemon 2.8.5.0 by executing the pass command, then the UIDL command and quitting the mail server before the UIDL has returned a response. This must be done...

Alt-N MDaemon 2.8.5 - UIDL Denial of Service

source: https://www.securityfocus.com/bid/1366/info A remote user is capable of crashing Alt-N MDaemon 2.8.5.0 by executing the pass command, then the UIDL command and quitting the mail server before the UIDL has returned a response. This must be done before the user is presented with the POP3...

Cobalt RaQ 2.03.0 qpopper 2.522.53 - EUIDL Format String Input

Cobalt RaQ 2.03.0 qpopper 2.522.53 - EUIDL Format String Input // source: https://www.securityfocus.com/bid/1242/info A vulnerability exists in version 2.53 and prior of qpopper, a popular POP server, from Qualcomm. By placing machine executable code in the X-UIDL header field, supplying formatti...

qpopper format string vulnerability

An authenticated user may trigger a format string vulnerability present in qpopper's UIDL code, resulting in arbitrary code execution with group ID mail' privileges...

ms.outlook.DoS.txt

Date: Fri, 25 Jun 1999 13:24:02 -0700 From: YoDuh To: [email protected] Subject: Outlook denial of service I've found a problem in qualcomm popper and presumabley others in that it doesn't check for an existing X-UIDL: headers, but simpley uses it when the client sends in a uidl request. This...