Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long (1) EXAMINE (2) DELETE (3) SUBSCRIBE (4) RENAME (5) UNSUBSCRIBE (6) LIST (7) LSUB (8) STATUS (9) LOGIN (10) CREATE or (11) SELECT command.