university of washington imap vulnerabilities and exploits

(subscribe to this query)

smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 ...

University Of Washington Imap Toolkit 2007b

The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user.

University Of Washington Uw-imap 2001.0a

Arbitrary command execution via IMAP buffer overflow in authenticate command.

University Of Washington Imap 10.234 Netscape Messaging Server 3.55

1 EDB exploit

The c-client library in Internet Message Access Protocol (IMAP) dated prior to 2002 RC2, as used by Pine 4.20 up to and including 4.44, allows remote malicious users to cause a denial of service (client crash) via a MIME-encoded email with Content-Type header containing an empty ...

University Of Washington Pine 4.44 University Of Washington Pine 4.20 University Of Washington Pine 4.21 University Of Washington Pine 4.30 University Of Washington Pine 4.33

1 EDB exploit

IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information.

University Of Washington Imapd University Of Washington Imapd 4.1

Buffer overflow in University of Washington's implementation of IMAP and POP servers.

University Of Washington Pop 3 University Of Washington Imap 4 Ibm Aix 4.2.1 Redhat Linux 2.0 Caldera Openlinux 1.0 Bsdi Bsd Os 3.0 Bsdi Bsd Os 2.1 Redhat Linux 4.0

1 EDB exploit

The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Mozilla Mozilla 1.3 Mozilla Mozilla 1.4 Microsoft Outlook Express 6.00.2800.1106 University Of Washington Pine 4.53 Ximian Evolution 1.2.4 Mutt Mutt 1.4.1 Qualcomm Eudora 5.2.1 Stuart Parmenter Balsa 2.0.10 Sylpheed Sylpheed Email Client 0.8.11

University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, wh...

Php Php Debian Debian Linux 8.0 Debian Debian Linux 9.0 Uw-imap Project Uw-imap 2007f Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 16.04

4 Github repositories

Rejected reason: Format string vulnerability in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit imap-2007d and other applications, allows remote malicious users to execute arbitrary code via format string specifiers in the initial request to the...

ext/imap/php_imap.c in PHP 5.x and 7.x prior to 7.3.0 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via an empty string in the message argument to the imap_mail function.

Php Php Debian Debian Linux 8.0 Debian Debian Linux 9.0

« PREV 1 2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook