Unscored severity · published May 26, 2005
CVE-2005-1522
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large…
–
CVSS
1.7%
EPSS
No
On KEV
Description
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mailutils · Gnu
0.5; 0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1522
Vendor Advisory
http://secunia.com/advisories/15442
securitytracker.com
http://securitytracker.com/id?1014052
www.debian.org
http://www.debian.org/security/2005/dsa-732
Patch
http://www.idefense.com/application/poi/display?id=247&type=vulnerabilities
Patch
http://www.securityfocus.com/bid/13765
More from Mailutils
7.8
CVE-2019-18862
maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode
–
CVE-2005-2878
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the…
–
CVE-2005-1824
The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape…
–
CVE-2005-1523
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string…
–
CVE-2005-1520
Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary…