CVE-2005-3640

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html
http://secunia.com/advisories/17609Vendor Advisory
http://www.lucaercoli.it/advs/FTGate4.txtExploit, Vendor Advisory
http://www.osvdb.org/20917
http://www.securityfocus.com/bid/15449Exploit
http://www.vupen.com/english/advisories/2005/2478Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/23101
http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html
http://secunia.com/advisories/17609Vendor Advisory
http://www.lucaercoli.it/advs/FTGate4.txtExploit, Vendor Advisory
http://www.osvdb.org/20917
http://www.securityfocus.com/bid/15449Exploit
http://www.vupen.com/english/advisories/2005/2478Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/23101

Timeline

Published: Nov 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-36417.5Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a val CVE-2005-36427.5IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authenticatio CVE-2005-36437.5IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on CVE-2005-36447.8PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows r CVE-2005-36455.0phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sen CVE-2005-36467.5Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote at CVE-2005-36474.6Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory.CVE-2005-36487.5Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary CVE-2005-36492.6jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.CVE-2005-36509.3The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has "safe for scripting" enabled, which allows CVE-2005-36517.5Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly CVE-2005-36527.5Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a lon