CVE-2008-5514 | | | 2008-12-23 | Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP… |
CVE-2008-5006 | | | 2008-11-10 | smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference… |
CVE-2008-5005 | | | 2008-11-10 | Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, an… |
CVE-2006-1394 | | | 2006-03-26 | Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1… |
CVE-2006-1393 | | | 2006-03-26 | Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1… |
CVE-2006-1392 | | | 2006-03-26 | Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2… |
CVE-2005-2933 | | | 2005-10-13 | Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute… |
CVE-2005-1066 | | | 2005-05-02 | Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack. |
CVE-2005-0198 | | | 2005-05-02 | A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5)… |
CVE-2003-0720 | | | 2003-09-17 | Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type. |
CVE-2003-0300 | | | 2003-06-16 | The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause… |
CVE-2003-0297 | | | 2003-06-16 | c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbit… |
CVE-2002-2325 | | | 2002-12-31 | The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a de… |
CVE-2002-1903 | | | 2002-12-31 | Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information. |
CVE-2002-1782 | | | 2002-12-31 | The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user wi… |
CVE-2002-1320 | | | 2002-12-11 | Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains… |
CVE-2002-0014 | | | 2002-07-26 | URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metac… |
CVE-2002-0379 | | | 2002-06-25 | Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and… |
CVE-2001-0736 | | | 2001-10-18 | Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink at… |
CVE-2001-0691 | | | 2001-09-20 | Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain confi… |
CVE-2000-1197 | | | 2001-08-31 | POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users… |
CVE-2000-0909 | | | 2000-12-19 | Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header. |
CVE-2000-0847 | | | 2000-11-14 | Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long… |
CVE-2000-0284 | | | 2000-04-16 | Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. |
CVE-1999-0997 | | | 1999-12-20 | wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does… |
CVE-2000-0352 | | | 1999-11-18 | Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed U… |
CVE-2000-0353 | | | 1999-06-28 | Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web se… |
CVE-1999-0920 | | | 1999-05-26 | Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. |
CVE-1999-0005 | | | 1998-07-20 | Arbitrary command execution via IMAP buffer overflow in authenticate command. |
CVE-1999-0004 | | | 1997-12-16 | MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. |
CVE-1999-1224 | | | 1997-10-08 | IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certa… |
CVE-1999-0042 | | | 1997-04-07 | Buffer overflow in University of Washington's implementation of IMAP and POP servers. |
CVE-1999-0202 | | | 1997-01-01 | The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands. |
CVE-1999-1187 | | | 1996-08-26 | Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail. |