Debian Security Advisory
imap4 -- The imapd, pop2d and pop3d servers allow remote, unauthenticated root access.
- Date Reported:
- 02 Mar 1997
- Affected Packages:
- imap4
- Vulnerable:
- No
- Security database references:
- No other external database security references currently available.
- More information:
-
Secure
Networks Inc. Security Advisory SNI-08 excerpt:
In essence this will allow any client with the ability to attempt a login to enter an overly long username to cause arbitrary machine code to execute.