CVE-2004-0224

CVE-2004-0224 affects Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0. The issue is multiple buffer overflows in the Unicode converters (iso2022jp.c and shiftjis.c) that occur when a character is outside the BMP range, enabling remote code execution as described in the ...

CVE-2006-2659

CVE-2006-2659 concerns the Courier MTA: a bug in libs/comverp.c affects encoding of usernames containing the ‘=’ character, causing high CPU usage and a potential Denial of Service. The issue is cited in multiple connected advisories (Debian DSA-1101, Ubuntu USN-294-1, Gentoo GLSA 200608-06) and ...

CVE-2003-0040

The CVE-2003-0040 entry concerns SQL injection in the courier mail server (courier 0.40 and earlier) via the PostgreSQL auth module. A remote attacker could inject SQL through the username, exploiting insufficient input sanitization in the authentication path. This is supported by multiple source...

CVE-2002-1311

CVE-2002-1311 affects Courier sqwebmail prior to 0.40.0, where the process does not promptly drop privileges after startup in certain scenarios, potentially enabling local users to read arbitrary files. Public sources (NVD, Debian DSA-197, OSV, OpenVAS) corroborate a local-privilege-usage vector ...

CVE-2002-0914

Technical details (affected product/version, root cause, impact, fixes) are not publicly provided in the supplied documents. Please monitor for updates.