Vulnerabilities (CVE)

Filtered by vendor Inter7 Subscribe
Filtered by product Courier-imap
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0224 3 Double Precision Incorporated, Gentoo, Inter7 4 Courier Mta, Sqwebmail, Linux and 1 more 2023-12-10 7.5 HIGH N/A
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."
CVE-2004-0777 1 Inter7 1 Courier-imap 2023-12-10 7.5 HIGH N/A
Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.
CVE-2003-0040 2 Double Precision Incorporated, Inter7 2 Courier Mta, Courier-imap 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.