CVE-2005-0100

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=110780416112719&w=2
http://www.debian.org/security/2005/dsa-670Patch, Vendor Advisory
http://www.debian.org/security/2005/dsa-671Patch, Vendor Advisory
http://www.debian.org/security/2005/dsa-685Patch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:038
http://www.redhat.com/support/errata/RHSA-2005-110.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-112.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-133.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/433928/30/5010/threaded
http://www.securityfocus.com/bid/12462
https://exchange.xforce.ibmcloud.com/vulnerabilities/19246
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408
http://marc.info/?l=bugtraq&m=110780416112719&w=2
http://www.debian.org/security/2005/dsa-670Patch, Vendor Advisory
http://www.debian.org/security/2005/dsa-671Patch, Vendor Advisory
http://www.debian.org/security/2005/dsa-685Patch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:038
http://www.redhat.com/support/errata/RHSA-2005-110.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-112.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-133.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/433928/30/5010/threaded
http://www.securityfocus.com/bid/12462
https://exchange.xforce.ibmcloud.com/vulnerabilities/19246
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408

Timeline

Published: Feb 7, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-01017.5Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code CVE-2005-01029.8Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrar CVE-2005-01037.5PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by CVE-2005-01044.3Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script CVE-2005-01054.6Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.CVE-2005-01064.6SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which al CVE-2005-01077.5bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands.CVE-2005-01085.0Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service (crash) via a RADIUS_CVE-2005-01095.6Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local CVE-2005-01102.6Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeab CVE-2005-01117.5Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long pas CVE-2005-01125.0The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1