courier vulnerabilities (Debian)

16 vulnerabilities.

• courier Debian Courier IMAP < 6.0.1 Mail Server < 2.0.2 Stack Overflow DoS via Nested SEARCH Queries CVE-2026-67194 Fix available 7.1 HighJuly 29, 2026
• courier Debian An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the... CVE-2021-38084 Fix available 8.1 HighAugust 3, 2021
• courier Debian libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU... CVE-2006-2659 Fix available 7.8 HighMay 30, 2006
• courier Debian authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using... CVE-2005-3532 Fix available 7.5 HighDecember 8, 2005
• courier Debian Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject... CVE-2005-2820 Fix available 4.3 MediumSeptember 7, 2005
• courier Debian Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows... CVE-2005-2769 Public exploitFix available 4.3 MediumSeptember 2, 2005
• courier Debian Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject... CVE-2005-2724 Fix available 4.3 MediumAugust 29, 2005
• courier Debian spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy... CVE-2005-2151 Fix available 5.0 MediumJuly 6, 2005
• courier Debian SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in... CVE-2005-1308 Public exploit 7.5 HighApril 15, 2005
• courier Debian Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords... CVE-2004-2313 Fix available 5.0 MediumDecember 31, 2004
• courier Debian Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3... CVE-2004-0777 Public exploitFix available EPSS 10.9% 7.5 HighAugust 19, 2004
• courier Debian Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and... CVE-2004-0591 Public exploitFix available 6.8 MediumJune 24, 2004
• courier Debian Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0,... CVE-2004-0224 Fix available 7.5 HighMarch 16, 2004
• courier Debian SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows... CVE-2003-0040 Fix available 7.5 HighJanuary 30, 2003
• courier Debian Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases,... CVE-2002-1311 Fix available 4.6 MediumNovember 15, 2002
• courier Debian Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU... CVE-2002-0914 Fix available 5.0 MediumOctober 4, 2002