CVE-2005-2933
CVE-2005-2933
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
EPSS 8.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:194
- http://www.redhat.com/support/errata/RHSA-2005-850.html
- http://secunia.com/advisories/17950
- http://secunia.com/advisories/21252
- http://secunia.com/advisories/17276
- http://secunia.com/advisories/17148
- http://secunia.com/advisories/20222
- http://secunia.com/advisories/20210
- http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm
- http://secunia.com/advisories/18554
- http://securityreason.com/securityalert/47
- http://secunia.com/advisories/17152
- http://rhn.redhat.com/errata/RHSA-2006-0276.html
- http://www.debian.org/security/2005/dsa-861
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html
- http://secunia.com/advisories/17062/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858
- http://www.securityfocus.com/bid/15009
- http://www.washington.edu/imap/
- http://www.redhat.com/support/errata/RHSA-2006-0501.html
- http://www.redhat.com/support/errata/RHSA-2005-848.html
- http://rhn.redhat.com/errata/RHSA-2006-0549.html
- http://secunia.com/advisories/20951
- https://nvd.nist.gov/vuln/detail/CVE-2005-2933