Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
university of washington uw-imap vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2005-2933
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote malicious users to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote...
University Of Washington Uw-imap 2004d
University Of Washington Uw-imap 2004e
University Of Washington Uw-imap 2004
University Of Washington Uw-imap 2004a
University Of Washington Uw-imap 2004b
University Of Washington Uw-imap 2004c
University Of Washington Uw-imap
7.5
CVSSv2
CVE-2002-0379
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and previous versions, allows remote authenticated users to execute arbitrary code via a long BODY reques...
University Of Washington Uw-imap 2000.287
University Of Washington Uw-imap 2000.315
University Of Washington Uw-imap 2000.283
University Of Washington Uw-imap 2000.284
2 EDB exploits
7.5
CVSSv2
CVE-2005-0198
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote mal...
University Of Washington Uw-imap
2.1
CVSSv2
CVE-2002-1782
The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user.
University Of Washington Uw-imap 2001.0a
10
CVSSv2
CVE-2008-5005
Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and previous versions, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the...
University Of Washington Alpine 0.82
University Of Washington Alpine 0.999999
University Of Washington Alpine 0.98
University Of Washington Alpine 1.00
University Of Washington Alpine 1.10
University Of Washington Alpine 0.99
University Of Washington Alpine 0.81
University Of Washington Imap Toolkit 2003
University Of Washington Imap Toolkit 2005
University Of Washington Imap Toolkit 2002
University Of Washington Alpine 2.00
University Of Washington Imap Toolkit 2007c
University Of Washington Alpine 0.80
University Of Washington Alpine 0.99999
University Of Washington Alpine 0.999
University Of Washington Alpine 0.9999
University Of Washington Imap Toolkit 2006
University Of Washington Imap Toolkit 2004
University Of Washington Imap Toolkit 2007
University Of Washington Alpine 0.83
4.3
CVSSv2
CVE-2008-5514
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent malicious users to cause a denial of service (...
University Of Washington Imap 2006h
University Of Washington Imap 2006g
University Of Washington Imap 2006
University Of Washington Imap 2004
University Of Washington Imap 2004g
University Of Washington Imap 2002
University Of Washington Imap 2001
University Of Washington Imap 2001a
University Of Washington Imap 2000
University Of Washington Imap 2006j
University Of Washington Imap 2006i
University Of Washington Imap 2006a
University Of Washington Imap 2007
University Of Washington Imap 2004e
University Of Washington Imap 2004f
University Of Washington Imap 2002e
University Of Washington Imap 2002f
University Of Washington Imap
University Of Washington Imap 2007b
University Of Washington Imap 2006f
University Of Washington Imap 2006e
University Of Washington Imap 2006d
5
CVSSv2
CVE-2008-5006
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 ...
University Of Washington Imap Toolkit 2007b
2.1
CVSSv2
CVE-2000-1197
POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes.
University Of Washington Imap 4.5
8.5
CVSSv2
CVE-2018-19518
University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, wh...
Php Php
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Uw-imap Project Uw-imap 2007f
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 19.04
Canonical Ubuntu Linux 16.04
4 Github repositories
NA
CVE-2009-0671
Rejected reason: Format string vulnerability in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit imap-2007d and other applications, allows remote malicious users to execute arbitrary code via format string specifiers in the initial request to the...
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
firewall
CVE-2024-35649
stored XSS
CVE-2022-28654
CVE-2020-35153
CVE-2024-27348
CVE-2022-28652
local users
CVE-2017-3506
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started