Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
UW-IMAP邮箱名称解析溢出漏洞
Vulnerability Description
UW-IMAP是Linux和UNIX系统的免费IMAP服务，捆绑于各种Linux版本中。 UW-IMAP中存在缓冲区溢出漏洞，起因是没有对用户提供的值进行充分的边界检查。src/c-client/mail.c中的mail_valid_net_parse_work()函数负责从用户提供的数据中获取并验证指定的邮箱名。在解析邮箱名时存在一个错误，会导致在解析单个双引号字符后继续拷贝内存，直到找到下一个单引号字符。 成功利用这个漏洞的攻击者会以IMAP服务程序的权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A