NVD

Id
4792  
Name
CVE-2008-5005  
Description
Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and "+" character followed by a long string, processed by the tmail or possibly dmail program.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-10  
Modified Date
2011-03-07  
Seq
2008-5005  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
29953 4792 CVE-2008-5005 [imap-uw] 20081031 Security bug in tmail and dmail  View
29954 4792 CVE-2008-5005 [imap-uw] 20081031 Security bug in tmail and dmail  View
29955 4792 CVE-2008-5005 20081103 Bitsec Security Advisory: UW/Panda IMAP [dt]mail buffer overflow  View
29956 4792 CVE-2008-5005 oval:org.mitre.oval:def:10485  View
29957 4792 CVE-2008-5005 http://panda.com/imap/  View
29958 4792 CVE-2008-5005 RHSA-2009:0275  View
29959 4792 CVE-2008-5005 4570  View
29960 4792 CVE-2008-5005 1021131  View
29961 4792 CVE-2008-5005 http://support.avaya.com/elmodocs2/security/ASA-2009-065.htm  View
29962 4792 CVE-2008-5005 http://www.bitsec.com/en/rad/bsa-081103.txt  View
29963 4792 CVE-2008-5005 DSA-1685  View
29964 4792 CVE-2008-5005 MDVSA-2009:146  View
29965 4792 CVE-2008-5005 [oss-security] 20081103 CVE request - uw-imap  View
29966 4792 CVE-2008-5005 [oss-security] 20081103 Re: CVE request - uw-imap  View
29967 4792 CVE-2008-5005 [oss-security] 20081103 Re: CVE request - uw-imap  View
29968 4792 CVE-2008-5005 20081103 Bitsec Security Advisory: UW/Panda IMAP [dt]mail buffer overflow  View
29969 4792 CVE-2008-5005 32072  View
29970 4792 CVE-2008-5005 ADV-2008-3042  View
29971 4792 CVE-2008-5005 http://www.washington.edu/alpine/tmailbug.html  View
29972 4792 CVE-2008-5005 uwimapd-tmail-bo(46281)  View
29973 4792 CVE-2008-5005 https://bugzilla.redhat.com/show_bug.cgi?id=469667  View
29974 4792 CVE-2008-5005 FEDORA-2008-9383  View
29975 4792 CVE-2008-5005 FEDORA-2008-9396  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46619 JVNDB-2008-001929 IMAP Toolkit および Alpine、Pand IMAP における任意のコードを実行される脆弱性 University of Washington IMAP Toolkit、University of Washington Alpinem、Panda IMAP には、tmail/dmail プログラムにおいて権限昇格の脆弱性、および、受信者のメールボックス名に電子メールを送信することによる任意のコードを実行される脆弱性が存在します。 CVE-2008-5005 35118 CVE-2008-5005 4792 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001929.html 2008-11-05 2009-03-19 View