double precision incorporated vulnerabilities and exploits

(subscribe to this query)

libs/comverp.c in Courier MTA prior to 0.53.2 allows malicious users to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.

Double Precision Incorporated Courier Mta 0.43.2 Double Precision Incorporated Courier Mta 0.44 Double Precision Incorporated Courier Mta 0.43 Double Precision Incorporated Courier Mta 0.43.1 Double Precision Incorporated Courier Mta 0.37.3 Double Precision Incorporated Courier Mta Double Precision Incorporated Courier Mta 0.38.1 Double Precision Incorporated Courier Mta 0.40

authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 up to and including 0.52.1, when using pam_tally, does not call the pam_acct_mgmt function to verify that access should be granted, which allows malicious users to authenticate to the server using accounts that have b...

Double Precision Incorporated Courier Mail Server 0.48 Double Precision Incorporated Courier Mail Server 0.46 Double Precision Incorporated Courier Mail Server 0.47 Double Precision Incorporated Courier Mail Server 0.37.3 Double Precision Incorporated Courier Mail Server 0.50.0 Double Precision Incorporated Courier Mail Server 0.52.1 Double Precision Incorporated Courier Mail Server 0.48.1 Double Precision Incorporated Courier Mail Server 0.48.2 Double Precision Incorporated Courier Mail Server 0.49.0

spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) records, which could allow malicious users to cause memory corruption.

Double Precision Incorporated Courier Mail Server 0.46 Double Precision Incorporated Courier Mail Server 0.47 Double Precision Incorporated Courier Mail Server 0.48 Double Precision Incorporated Courier Mail Server 0.48.1 Double Precision Incorporated Courier Mail Server 0.48.2 Double Precision Incorporated Courier Mail Server 0.50.0 Double Precision Incorporated Courier Mail Server 0.49.0

Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP prior to 3.0.0, Courier prior to 0.45, and SqWebMail prior to 4.0.0 may allow remote malicious users to execute arbitrary code "when Unicode character is out of BMP range."

Double Precision Incorporated Courier Mta 0.43 Double Precision Incorporated Courier Mta 0.43.1 Double Precision Incorporated Sqwebmail 3.6.2 Double Precision Incorporated Sqwebmail 3.6 .0 Inter7 Courier-imap 2.2.1 Double Precision Incorporated Courier Mta 0.44.2 Double Precision Incorporated Sqwebmail 3.5.2 Inter7 Courier-imap 2.0.0 Inter7 Courier-imap 2.1 Double Precision Incorporated Courier Mta 0.43.2 Double Precision Incorporated Courier Mta 0.44 Inter7 Courier-imap 1.6 Inter7 Courier-imap 1.7 Double Precision Incorporated Sqwebmail 3.5.3 Double Precision Incorporated Sqwebmail 3.6.1 Inter7 Courier-imap 2.1.1 Inter7 Courier-imap 2.1.2 Inter7 Courier-imap 2.2.0 Gentoo Linux 1.4

Courier sqwebmail prior to 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.

Double Precision Incorporated Courier Mta 0.37.3 Double Precision Incorporated Courier Mta 0.40

Double Precision Courier e-mail MTA allows remote malicious users to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop.

Double Precision Incorporated Courier Mta 0.38.1

SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and previous versions allows remote malicious users to execute SQL code via the user name.

Inter7 Courier-imap 1.6 Double Precision Incorporated Courier Mta 0.37.3

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook