double precision incorporated courier mta vulnerabilities and exploits

(subscribe to this query)

libs/comverp.c in Courier MTA prior to 0.53.2 allows malicious users to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.

Double Precision Incorporated Courier Mta 0.43.2 Double Precision Incorporated Courier Mta 0.44 Double Precision Incorporated Courier Mta 0.43 Double Precision Incorporated Courier Mta 0.43.1 Double Precision Incorporated Courier Mta 0.37.3 Double Precision Incorporated Courier Mta Double Precision Incorporated Courier Mta 0.38.1 Double Precision Incorporated Courier Mta 0.40

Courier sqwebmail prior to 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.

Double Precision Incorporated Courier Mta 0.37.3 Double Precision Incorporated Courier Mta 0.40

Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP prior to 3.0.0, Courier prior to 0.45, and SqWebMail prior to 4.0.0 may allow remote malicious users to execute arbitrary code "when Unicode character is out of BMP range."

Double Precision Incorporated Courier Mta 0.43 Double Precision Incorporated Courier Mta 0.43.1 Double Precision Incorporated Sqwebmail 3.6.2 Double Precision Incorporated Sqwebmail 3.6 .0 Inter7 Courier-imap 2.2.1 Double Precision Incorporated Courier Mta 0.44.2 Double Precision Incorporated Sqwebmail 3.5.2 Inter7 Courier-imap 2.0.0 Inter7 Courier-imap 2.1 Double Precision Incorporated Courier Mta 0.43.2 Double Precision Incorporated Courier Mta 0.44 Inter7 Courier-imap 1.6 Inter7 Courier-imap 1.7 Double Precision Incorporated Sqwebmail 3.5.3 Double Precision Incorporated Sqwebmail 3.6.1 Inter7 Courier-imap 2.1.1 Inter7 Courier-imap 2.1.2 Inter7 Courier-imap 2.2.0 Gentoo Linux 1.4

Double Precision Courier e-mail MTA allows remote malicious users to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop.

Double Precision Incorporated Courier Mta 0.38.1

SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and previous versions allows remote malicious users to execute SQL code via the user name.

Inter7 Courier-imap 1.6 Double Precision Incorporated Courier Mta 0.37.3

spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow malicious users to cause memory corruption.

Double Precision Incorporated Courier Mail Server 0.46 Double Precision Incorporated Courier Mail Server 0.47 Double Precision Incorporated Courier Mail Server 0.48 Double Precision Incorporated Courier Mail Server 0.48.1 Double Precision Incorporated Courier Mail Server 0.48.2 Double Precision Incorporated Courier Mail Server 0.50.0 Double Precision Incorporated Courier Mail Server 0.49.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook