carnegie mellon university vulnerabilities and exploits

(subscribe to this query)

Multiple buffer overflows in the CMU Cyrus SASL library prior to 2.1.23 might allow remote malicious users to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.

Carnegie Mellon University Cyrus-sasl 2.1.19 Carnegie Mellon University Cyrus-sasl Carnegie Mellon University Cyrus-sasl 1.5.24 Carnegie Mellon University Cyrus-sasl 1.5.15 Carnegie Mellon University Cyrus-sasl 1.5.16 Carnegie Mellon University Cyrus-sasl 1.5.27 Carnegie Mellon University Cyrus-sasl 1.5.3 Carnegie Mellon University Cyrus-sasl 2.0.5 Carnegie Mellon University Cyrus-sasl 2.1.0 Carnegie Mellon University Cyrus-sasl 2.1.1 Carnegie Mellon University Cyrus-sasl 2.1.16 Carnegie Mellon University Cyrus-sasl 2.1.21 Carnegie Mellon University Cyrus-sasl 2.1.20 Carnegie Mellon University Cyrus-sasl 1.5.11 Carnegie Mellon University Cyrus-sasl 1.5.13 Carnegie Mellon University Cyrus-sasl 1.5.23 Carnegie Mellon University Cyrus-sasl 1.5.26 Carnegie Mellon University Cyrus-sasl 2.0.3 Carnegie Mellon University Cyrus-sasl 2.0.4 Carnegie Mellon University Cyrus-sasl 2.1.14 Carnegie Mellon University Cyrus-sasl 2.1.15 Carnegie Mellon University Cyrus-sasl 2.1.6

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and previous versions leads to a buffer overflow, which may allow remote malicious users to execute arbitrary code via the username.

Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.1.16 Carnegie Mellon University Cyrus Imap Server 2.2.4 Carnegie Mellon University Cyrus Imap Server 2.2.5 Carnegie Mellon University Cyrus Imap Server 1.4 Carnegie Mellon University Cyrus Imap Server 1.5.19 Carnegie Mellon University Cyrus Imap Server 2.2.0 Alpha Carnegie Mellon University Cyrus Imap Server 2.2.1 Beta Carnegie Mellon University Cyrus Imap Server 2.2.8 Carnegie Mellon University Cyrus Imap Server 2.2.9 Carnegie Mellon University Cyrus Imap Server 2.1.7 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 2.2.6 Carnegie Mellon University Cyrus Imap Server 2.2.7 Carnegie Mellon University Cyrus Imap Server 2.0.12 Carnegie Mellon University Cyrus Imap Server 2.0.16 Carnegie Mellon University Cyrus Imap Server 2.2.2 Beta Carnegie Mellon University Cyrus Imap Server 2.2.3 Ubuntu Ubuntu Linux 4.1 Redhat Fedora Core Core 2.0 Redhat Fedora Core Core 3.0

Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and previous versions, with the imapmagicplus option enabled, may allow remote malicious users to execute arbitrary code, a different vulnerability than CVE-2004-1011.

Carnegie Mellon University Cyrus Imap Server 1.4 Carnegie Mellon University Cyrus Imap Server 1.5.19 Carnegie Mellon University Cyrus Imap Server 2.2.1 Beta Carnegie Mellon University Cyrus Imap Server 2.2.2 Beta Carnegie Mellon University Cyrus Imap Server 2.2.9 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 2.2.0 Alpha Carnegie Mellon University Cyrus Imap Server 2.2.7 Carnegie Mellon University Cyrus Imap Server 2.1.16 Carnegie Mellon University Cyrus Imap Server 2.1.7 Carnegie Mellon University Cyrus Imap Server 2.2.5 Carnegie Mellon University Cyrus Imap Server 2.2.6 Carnegie Mellon University Cyrus Imap Server 2.2.8 Carnegie Mellon University Cyrus Imap Server 2.0.12 Carnegie Mellon University Cyrus Imap Server 2.0.16 Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.2.3 Carnegie Mellon University Cyrus Imap Server 2.2.4 Ubuntu Ubuntu Linux 4.1 Redhat Fedora Core Core 2.0 Redhat Fedora Core Core 3.0

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote malicious users to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

Carnegie Mellon University Cyrus Imap Server 2.0.12 Carnegie Mellon University Cyrus Imap Server 2.0.16 Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 1.4 Carnegie Mellon University Cyrus Imap Server 1.5.19

1 EDB exploit

Format string vulnerability in the snmp_input function in snmptrapd in CMU SNMP utilities (cmu-snmp) allows remote malicious users to execute arbitrary code by sending crafted SNMP messages to UDP port 162.

Carnegie Mellon University Snmptrapd 3.7 Carnegie Mellon University Snmptrapd 3.6

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 up to and including 2.2.8, with the imapmagicplus option enabled, allows remote malicious users to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.

Carnegie Mellon University Cyrus Imap Server 2.1.7 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 2.2.6 Carnegie Mellon University Cyrus Imap Server 2.2.7 Carnegie Mellon University Cyrus Imap Server 2.2.8 Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.1.16 Carnegie Mellon University Cyrus Imap Server 2.2.4 Carnegie Mellon University Cyrus Imap Server 2.2.5 Carnegie Mellon University Cyrus Imap Server 2.2.2 Beta Carnegie Mellon University Cyrus Imap Server 2.2.3 Conectiva Linux 9.0 Carnegie Mellon University Cyrus Imap Server 2.2.0 Alpha Carnegie Mellon University Cyrus Imap Server 2.2.1 Beta Openpkg Openpkg Current Conectiva Linux 10.0 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Redhat Fedora Core Core 2.0 Redhat Fedora Core Core 3.0 Ubuntu Ubuntu Linux 4.1 Trustix Secure Linux 2.2

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and previous versions allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index in...

Carnegie Mellon University Cyrus Imap Server 2.1.7 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 2.2.7 Carnegie Mellon University Cyrus Imap Server 2.2.8 Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.1.16 Carnegie Mellon University Cyrus Imap Server 2.2.4 Carnegie Mellon University Cyrus Imap Server 2.2.5 Carnegie Mellon University Cyrus Imap Server 2.2.6 Carnegie Mellon University Cyrus Imap Server 2.2.2 Beta Carnegie Mellon University Cyrus Imap Server 2.2.3 Conectiva Linux 9.0 Carnegie Mellon University Cyrus Imap Server 2.2.0 Alpha Carnegie Mellon University Cyrus Imap Server 2.2.1 Beta Openpkg Openpkg Current Conectiva Linux 10.0 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Redhat Fedora Core Core 2.0 Redhat Fedora Core Core 3.0 Ubuntu Ubuntu Linux 4.1 Trustix Secure Linux 2.2

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x up to and including 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an inde...

Carnegie Mellon University Cyrus Imap Server 2.1.7 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 2.2.7 Carnegie Mellon University Cyrus Imap Server 2.2.8 Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.1.16 Carnegie Mellon University Cyrus Imap Server 2.2.5 Carnegie Mellon University Cyrus Imap Server 2.2.6 Carnegie Mellon University Cyrus Imap Server 2.2.2 Beta Carnegie Mellon University Cyrus Imap Server 2.2.3 Carnegie Mellon University Cyrus Imap Server 2.2.4 Conectiva Linux 9.0 Carnegie Mellon University Cyrus Imap Server 2.2.0 Alpha Carnegie Mellon University Cyrus Imap Server 2.2.1 Beta Openpkg Openpkg Current Conectiva Linux 10.0 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Redhat Fedora Core Core 2.0 Redhat Fedora Core Core 3.0 Ubuntu Ubuntu Linux 4.1 Trustix Secure Linux 2.2

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote malicious users to cause a denial of service (hang) using PHP IMAP clients.

Carnegie Mellon University Cyrus Imap Server 1.6.24 Carnegie Mellon University Cyrus Imap Server 2.0.15 Carnegie Mellon University Cyrus Imap Server 2.0.16 Bsdi Bsd Os 4.2

cyrus-sasl prior to 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.

Carnegie Mellon University Cyrus-sasl 1.5.24

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook