Unscored severity · published May 26, 2005
CVE-2005-1521
Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code…
–
CVSS
3.3%
EPSS
No
On KEV
Description
Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mailutils · Gnu
0.5; 0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1521
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1521
Vendor Advisory
http://secunia.com/advisories/15442
securitytracker.com
http://securitytracker.com/id?1014052
www.debian.org
http://www.debian.org/security/2005/dsa-732
Patch
http://www.idefense.com/application/poi/display?id=248&type=vulnerabilities
Patch
http://www.securityfocus.com/bid/13763
More from Mailutils
7.8
CVE-2019-18862
maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode
–
CVE-2005-2878
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the…
–
CVE-2005-1824
The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape…
–
CVE-2005-1522
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large…
–
CVE-2005-1523
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string…