CVE search results

1 – 6 of 6 results

Detailed view

Sort by:

CVE-2018-19518

Medium priority

Some fixes available 9 of 10

University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function...

6 affected packages

php-imap, php5, php7.0, php7.2, php7.3, uw-imap

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
php-imap	—	Not in release	Not in release	Not in release	Not in release
php5	—	Not in release	Not in release	Not in release	Not in release
php7.0	—	Not in release	Not in release	Not in release	Fixed
php7.2	—	Not in release	Not in release	Fixed	Not in release
php7.3	—	Not in release	Not in release	Not in release	Not in release
uw-imap	—	Not affected	Not affected	Fixed	Fixed

CVE-2008-5514

Medium priority

Ignored

Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications,...

1 affected packages

uw-imap

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
uw-imap	—	—	—	—	—

CVE-2008-5006

Medium priority

Ignored

smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close...

1 affected packages

uw-imap

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
uw-imap	—	—	—	—	—

CVE-2008-5005

Medium priority

Ignored

Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying...

2 affected packages

alpine, uw-imap

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
alpine	—	—	—	—	—
uw-imap	—	—	—	—	—

CVE-2005-2933

Unknown priority

Fixed

Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (")...

1 affected packages

uw-imap

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
uw-imap	—	—	—	—	—

CVE-2005-0198

Unknown priority

Fixed

A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for...

1 affected packages

uw-imap

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
uw-imap	—	—	—	—	—

Search CVE reports