IMAP
CVEs (13)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2000-0284 | 0.09 | — | 0.69 | Apr 16, 2000 | Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. | |||
| CVE-1999-0920 | 0.06 | — | 0.32 | May 26, 1999 | Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. | |||
| CVE-2002-0379 | 0.05 | — | 0.19 | Jun 25, 2002 | Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request. | |||
| CVE-1999-0005 | 0.05 | — | 0.18 | Jul 20, 1998 | Arbitrary command execution via IMAP buffer overflow in authenticate command. | |||
| CVE-1999-0042 | 0.04 | — | 0.13 | Apr 7, 1997 | Buffer overflow in University of Washington's implementation of IMAP and POP servers. | |||
| CVE-2005-2933 | 0.01 | — | 0.08 | Oct 13, 2005 | Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes… | |||
| CVE-2008-5514 | 0.00 | — | 0.02 | Dec 23, 2008 | Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service… | |||
| CVE-2005-0198 | 0.00 | — | 0.05 | May 2, 2005 | A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote… | |||
| CVE-2002-1782 | 0.00 | — | 0.00 | Dec 31, 2002 | The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user. | |||
| CVE-2001-0691 | 0.00 | — | 0.01 | Sep 20, 2001 | Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations. | |||
| CVE-2000-1197 | 0.00 | — | 0.00 | Aug 31, 2001 | POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes. | |||
| CVE-2000-0847 | 0.00 | — | 0.03 | Nov 14, 2000 | Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header. | |||
| CVE-1999-1224 | 0.00 | — | 0.00 | Oct 8, 1997 | IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information. |
- CVE-2000-0284Apr 16, 2000risk 0.09cvss —epss 0.69
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.
- CVE-1999-0920May 26, 1999risk 0.06cvss —epss 0.32
Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
- CVE-2002-0379Jun 25, 2002risk 0.05cvss —epss 0.19
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request.
- CVE-1999-0005Jul 20, 1998risk 0.05cvss —epss 0.18
Arbitrary command execution via IMAP buffer overflow in authenticate command.
- CVE-1999-0042Apr 7, 1997risk 0.04cvss —epss 0.13
Buffer overflow in University of Washington's implementation of IMAP and POP servers.
- CVE-2005-2933Oct 13, 2005risk 0.01cvss —epss 0.08
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes…
- CVE-2008-5514Dec 23, 2008risk 0.00cvss —epss 0.02
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service…
- CVE-2005-0198May 2, 2005risk 0.00cvss —epss 0.05
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote…
- CVE-2002-1782Dec 31, 2002risk 0.00cvss —epss 0.00
The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user.
- CVE-2001-0691Sep 20, 2001risk 0.00cvss —epss 0.01
Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations.
- CVE-2000-1197Aug 31, 2001risk 0.00cvss —epss 0.00
POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes.
- CVE-2000-0847Nov 14, 2000risk 0.00cvss —epss 0.03
Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header.
- CVE-1999-1224Oct 8, 1997risk 0.00cvss —epss 0.00
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information.