CVE-2005-4445

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via a long email message header, which triggers a one-byte buffer overflow.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17992Vendor Advisory
http://secunia.com/secunia_research/2005-61/advisory/Vendor Advisory
http://securitytracker.com/id?1015385
http://www.osvdb.org/21843
http://www.pmail.com/newsflash.htm#secuniaVendor Advisory
http://www.securityfocus.com/archive/1/419908/100/0/threaded
http://www.securityfocus.com/bid/15973
http://secunia.com/advisories/17992Vendor Advisory
http://secunia.com/secunia_research/2005-61/advisory/Vendor Advisory
http://securitytracker.com/id?1015385
http://www.osvdb.org/21843
http://www.pmail.com/newsflash.htm#secuniaVendor Advisory
http://www.securityfocus.com/archive/1/419908/100/0/threaded
http://www.securityfocus.com/bid/15973

Timeline

Published: Dec 21, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-44464.3Cross-site scripting (XSS) vulnerability in index.asp in ASPBite 8.x allows remote attackers to inject arbitrary web script or HTML via the CVE-2005-44477.5SQL injection vulnerability in articles\articles_funcs.php in phpCOIN 1.2.2 allows remote attackers to modify SQL syntax and possibly execut CVE-2005-444810.0FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaint CVE-2005-44494.0verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an ar CVE-2005-44507.5Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in u CVE-2005-44517.5Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors.CVE-2005-44525.0Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote atta CVE-2005-44539.0UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the ori CVE-2005-44544.3Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows CVE-2005-44555.0cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML,CVE-2005-44567.8Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial CVE-2005-44577.5MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary