Courier-imap CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2003-0040

SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Double Precision Incorporated Inter7

Products

Courier Mta Courier-imap

CVE-2004-0224

Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."

CVSS 2.0 · 7.5 High EPSS 3.3% KEV · Not listed

Vendors

Double Precision Incorporated Gentoo Inter7

Products

Courier Mta Sqwebmail Linux and 1 more

CVE-2004-0777

Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.

CVSS 2.0 · 7.5 High EPSS 10.9% KEV · Not listed

Vendors

Inter7

Products

Courier-imap

Page 1 of 1.