Vulnerability CVE-2005-1523
Published: 2005-05-26   Modified: 2012-02-12

Description:
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
GNU -> Mailutils 

 References:
http://www.securityfocus.com/bid/13764
http://www.idefense.com/application/poi/display?id=246&type=vulnerabilities
http://www.debian.org/security/2005/dsa-732
http://securitytracker.com/id?1014052
http://secunia.com/advisories/15442
Copyright 2024, cxsecurity.com

 

Back to Top