6 matches found
CVE-1999-1366
CVE-1999-1366 affects Pegasus Mail client (Pegasus e-mail client) 3.0 and earlier. The vulnerability arises from storing POP3 passwords in pmail.ini with weak encryption, allowing local users to decrypt passwords and read e-mail. The provided documents do not include an official fix or remediatio...
CVE-2005-4445
CVE-2005-4445 affects Pegasus Mail client versions 4.21a–4.21c and 4.30PB1. An off-by-one error in email header processing causes a one-byte buffer overflow , enabling remote attackers to execute arbitrary code by sending a crafted long header. Exploitation is remote; no authentication is indicat...
CVE-2005-4444
Pegasus Mail 4.21a–4.21c and 4.30PB1 are affected by a stack-based buffer overflow in the trace message functionality that can be triggered by a long POP3 reply, allowing remote code execution. This CVE entry (CVE-2005-4444) is based on publicly documented details across multiple sources (NVD/CVE...
CVE-2002-1075
Pegasus Mail vulnerability CVE-2002-1075 affects Pegasus Mail client versions prior to 4.02 (per connected Nessus entry). It is caused by a buffer overflow in the To/From header processing, allowing a remote attacker to trigger a denial of service and potentially execute arbitrary code. The secur...