CVE-2005-2933
CVE-2005-2933
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
EPSS 8,5% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
Fuentes originales
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:194
- http://www.redhat.com/support/errata/RHSA-2005-850.html
- http://secunia.com/advisories/17950
- http://secunia.com/advisories/21252
- http://secunia.com/advisories/17276
- http://secunia.com/advisories/17148
- http://secunia.com/advisories/20222
- http://secunia.com/advisories/20210
- http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm
- http://secunia.com/advisories/18554
- http://securityreason.com/securityalert/47
- http://secunia.com/advisories/17152
- http://rhn.redhat.com/errata/RHSA-2006-0276.html
- http://www.debian.org/security/2005/dsa-861
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html
- http://secunia.com/advisories/17062/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858
- http://www.securityfocus.com/bid/15009
- http://www.washington.edu/imap/
- http://www.redhat.com/support/errata/RHSA-2006-0501.html
- http://www.redhat.com/support/errata/RHSA-2005-848.html
- http://rhn.redhat.com/errata/RHSA-2006-0549.html
- http://secunia.com/advisories/20951
- https://nvd.nist.gov/vuln/detail/CVE-2005-2933