UO
Vendor
University OF Washington
40
CVEs
0
On KEV
0
New 30D
Products
PI–
Pine
University OF Washington
15 CVEs0 on KEV0 new
IM–
Imap
University OF Washington
7 CVEs0 on KEV0 new
UW–
Uw-imap
University OF Washington
4 CVEs0 on KEV0 new
PU–
Pubcookie
University OF Washington
3 CVEs0 on KEV0 new
IT–
Imap Toolkit
University OF Washington
2 CVEs0 on KEV0 new
IM–
Imapd
University OF Washington
2 CVEs0 on KEV0 new
WU–
Wu-ftpd
University OF Washington
2 CVEs0 on KEV0 new
AL–
Alpine
University OF Washington
1 CVEs0 on KEV0 new
CC–
C-client
University OF Washington
1 CVEs0 on KEV0 new
IM–
Imap-2002b
University OF Washington
1 CVEs0 on KEV0 new
PO–
Pop
University OF Washington
1 CVEs0 on KEV0 new
PO–
Pop2d
University OF Washington
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2008-5514 | IM Imap University OF Washington | – | Dec 23 | Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before… |
| CVE-2008-5006 | IT Imap Toolkit University OF Washington | – | Nov 10 | smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application… |
| CVE-2008-5005 | AL Alpine University OF Washington | – | Nov 10 | Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP… |
| CVE-2006-1394 | PU Pubcookie University OF Washington | – | Mar 26 | Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2… |
| CVE-2006-1393 | PU Pubcookie University OF Washington | – | Mar 26 | Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2… |
| CVE-2006-1392 | PU Pubcookie University OF Washington | – | Mar 26 | Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before… |
| CVE-2005-2933 | UW Uw-imap University OF Washington | – | Oct 13 | Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via… |
| CVE-2005-0198 | UW Uw-imap University OF Washington | – | May 2 | A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does… |
| CVE-2005-1066 | PI Pine University OF Washington | – | May 2 | Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack |
| CVE-2003-0720 | PI Pine University OF Washington | – | Sep 17 | Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type |
| CVE-2003-0300 | PI Pine University OF Washington | – | Jun 16 | The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer… |
| CVE-2003-0297 | CC C-client University OF Washington | – | Jun 16 | c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via… |
| CVE-2002-1782 | UW Uw-imap University OF Washington | – | Dec 31 | The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP… |
| CVE-2002-2325 | PI Pine University OF Washington | – | Dec 31 | The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service… |
| CVE-2002-1903 | PI Pine University OF Washington | – | Dec 31 | Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information |
| CVE-2002-1320 | PI Pine University OF Washington | – | Dec 11 | Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of… |
| CVE-2002-0014 | PI Pine University OF Washington | – | Jul 26 | URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&) |
| CVE-2002-0379 | UW Uw-imap University OF Washington | – | Jun 25 | Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and… |
| CVE-2001-0736 | PI Pine University OF Washington | – | Oct 18 | Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack |
| CVE-2001-0691 | IM Imapd University OF Washington | – | Sep 20 | Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations |
| CVE-2000-1197 | IM Imap University OF Washington | – | Aug 31 | POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of… |
| CVE-2000-0909 | PI Pine University OF Washington | – | Dec 19 | Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header |
| CVE-2000-0847 | IM Imap University OF Washington | – | Nov 14 | Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header |
| CVE-2000-0284 | IM Imap University OF Washington | – | Apr 16 | Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands |
| CVE-1999-0997 | WU Wu-ftpd University OF Washington | – | Dec 20 | wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g |
| CVE-2000-0352 | PI Pine University OF Washington | – | Nov 18 | Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL |
| CVE-2000-0353 | PI Pine University OF Washington | – | Jun 28 | Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then… |
| CVE-1999-0920 | IM Imap University OF Washington | – | May 26 | Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command |
| CVE-1999-0005 | IM Imap University OF Washington | – | Jul 20 | Arbitrary command execution via IMAP buffer overflow in authenticate command |
| CVE-1999-0004 | PI Pine University OF Washington | – | Dec 16 | MIME buffer overflow in email clients, e.g |
| CVE-1999-1224 | IM Imapd University OF Washington | – | Oct 8 | IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of… |
| CVE-1999-0042 | IM Imap University OF Washington | – | Apr 7 | Buffer overflow in University of Washington's implementation of IMAP and POP servers |
| CVE-1999-0202 | WU Wu-ftpd University OF Washington | – | Jan 1 | The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands |
| CVE-1999-1187 | PI Pine University OF Washington | – | Aug 26 | Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail |