CVE-2004-1211 – Mercury/32 Mail Server 4.01a - 'check' Buffer Overflow

https://notcve.org/view.php?id=CVE-2004-1211

Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands. • https://www.exploit-db.com/exploits/1159 https://www.exploit-db.com/exploits/16484 https://www.exploit-db.com/exploits/668 https://www.exploit-db.com/exploits/663 https://www.exploit-db.com/exploits/3561 https://www.exploit-db.com/exploits/4316 https://www.exploit-db.com/exploits/670 http://home.kabelfoon.nl/~jaabogae/han/m_401b.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029701.html http://marc.info/?l=bugtraq&m=110193702909991&w& • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •