CVEvulnerability
CVE-2005-2878
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-09-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.
Affected configurations
• gnu mailutils 0.6
References
- http://marc.info/?l=bugtraq&m=112785181316043&w=2 marc.info
- http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407 Patch
- http://secunia.com/advisories/16783 secunia.com
- http://secunia.com/advisories/17020 secunia.com
- http://www.debian.org/security/2005/dsa-841 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml www.gentoo.org
- http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true Exploit, Patch, Vendor Advisory
- http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c www.rosiello.org
- http://www.securityfocus.com/bid/14794 www.securityfocus.com
- http://marc.info/?l=bugtraq&m=112785181316043&w=2 marc.info
- http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407 Patch
- http://secunia.com/advisories/16783 secunia.com
- http://secunia.com/advisories/17020 secunia.com
- http://www.debian.org/security/2005/dsa-841 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml www.gentoo.org
- http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true Exploit, Patch, Vendor Advisory
- http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c www.rosiello.org
- http://www.securityfocus.com/bid/14794 www.securityfocus.com