Description
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/15442Vendor Advisory
- http://securitytracker.com/id?1014052
- http://www.debian.org/security/2005/dsa-732
- http://www.idefense.com/application/poi/display?id=246&type=vulnerabilitiesPatch
- http://www.securityfocus.com/bid/13764Patch
- http://secunia.com/advisories/15442Vendor Advisory
- http://securitytracker.com/id?1014052
- http://www.debian.org/security/2005/dsa-732
- http://www.idefense.com/application/poi/display?id=246&type=vulnerabilitiesPatch
- http://www.securityfocus.com/bid/13764Patch
Timeline
- Published
- May 26, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified