courier

16 results · Feed

• Medium 6.5
  CVE-2026-67194

  Courier IMAP < 6.0.1 Mail Server < 2.0.2 Stack Overflow DoS via Nested SEARCH Queries

  Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser (alloc_search_key in searchinfo.C) recursively descends on neste…

  svarshavchik Courier Mail Server Courier IMAP courier Debian Ubuntu
  Jul 29, 2026
• Unscored —
  CVE-2021-38084

  An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can …

  courier courier Debian Ubuntu
  Aug 3, 2021
• Unscored —
  CVE-2006-2659

  libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown…

  courier Debian
  May 30, 2006
• Unscored —
  CVE-2005-3532

  authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the …

  courier Debian
  Dec 11, 2005
• Unscored —
  CVE-2005-2820

  Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or H…

  courier Debian
  Sep 7, 2005
• Unscored —
  CVE-2005-2769 Public exploit

  Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inje…

  courier Debian
  Sep 2, 2005
• Unscored —
  CVE-2005-2724

  Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or H…

  courier Debian
  Aug 29, 2005
• Unscored —
  CVE-2004-2313

  Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct password…

  courier Debian
  Aug 16, 2005
• Unscored —
  CVE-2005-2151

  spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) record…

  courier Debian
  Jul 6, 2005
• Unscored —
  CVE-2005-1308 Public exploit

  SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter f…

  courier Debian
  Apr 27, 2005
• Unscored —
  CVE-2002-1311

  Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow loca…

  courier Debian
  Sep 1, 2004
• Unscored —
  CVE-2003-0040

  SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execu…

  courier Debian
  Sep 1, 2004
• Unscored —
  CVE-2004-0777 Public exploit EPSS 11%

  Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when …

  courier Debian
  Aug 19, 2004
• Unscored —
  CVE-2004-0591 Public exploit

  Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly …

  courier Debian
  Jun 24, 2004
• Unscored —
  CVE-2004-0224

  Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and …

  courier Debian
  Mar 16, 2004
• Unscored —
  CVE-2002-0914

  Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a messag…

  courier Debian
  Apr 2, 2003