CVE-2005-1523

Published: May 26, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.

Affected (2)

Products: Gnu: Mailutils

Gnu

1 product

Mailutils

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Gnu Mailutils	Version 0.5
Gnu Mailutils	Version 0.6

References (10)

http://secunia.com/advisories/15442

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1014052

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-732

Source: cve@mitre.org

http://www.idefense.com/application/poi/display?id=246&type=vulnerabilities

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/13764

Source: cve@mitre.org

Patch

http://secunia.com/advisories/15442