NVD

Id
68598  
Name
CVE-2005-2933  
Description
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-10-13  
Modified Date
2017-07-10  
Seq
2005-2933  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
354466 68598 CVE-2005-2933 20051201-01-U  View
354467 68598 CVE-2005-2933 20060501-01-U  View
354468 68598 CVE-2005-2933 20051004 iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability  View
354469 68598 CVE-2005-2933 oval:org.mitre.oval:def:9858  View
354470 68598 CVE-2005-2933 RHSA-2006:0276  View
354471 68598 CVE-2005-2933 RHSA-2006:0549  View
354472 68598 CVE-2005-2933 47  View
354473 68598 CVE-2005-2933 1015000  View
354474 68598 CVE-2005-2933 SSA:2005-310-06  View
354475 68598 CVE-2005-2933 http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm  View
354476 68598 CVE-2005-2933 http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm  View
354477 68598 CVE-2005-2933 DSA-861  View
354478 68598 CVE-2005-2933 GLSA-200510-10  View
354479 68598 CVE-2005-2933 20051004 UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability  View
354480 68598 CVE-2005-2933 VU#933601  View
354481 68598 CVE-2005-2933 MDKSA-2005:189  View
354482 68598 CVE-2005-2933 MDKSA-2005:194  View
354483 68598 CVE-2005-2933 SUSE-SR:2005:023  View
354484 68598 CVE-2005-2933 RHSA-2005:848  View
354485 68598 CVE-2005-2933 RHSA-2005:850  View
354486 68598 CVE-2005-2933 RHSA-2006:0501  View
354487 68598 CVE-2005-2933 FLSA:170411  View
354488 68598 CVE-2005-2933 FLSA:184098  View
354489 68598 CVE-2005-2933 15009  View
354490 68598 CVE-2005-2933 ADV-2006-2685  View
354491 68598 CVE-2005-2933 http://www.washington.edu/imap/  View
354492 68598 CVE-2005-2933 uw-imap-mailbox-name-bo(22518)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62346 JVNDB-2005-000548 UW IMAP の mail_valid_net_parse_work() 関数におけるバッファオーバーフローの脆弱性 UW IMAP には、 src/c-client/mail.c 内の mail_valid_net_parse_work() 関数において、メールボックス名をメモリ領域にコピーする際の処理不備のため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-2933 14137 CVE-2005-2933 68598 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000548.html 2005-10-04 2007-07-24 View