CVE-2005-2933

Published: Oct 13, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.

Affected (7)

Products: University Of Washington: Uw Imap

University Of Washington

1 product

Uw Imap

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
University Of Washington Uw Imap	Up to 2004f
University Of Washington Uw Imap	Version 2004
University Of Washington Uw Imap	Version 2004a
University Of Washington Uw Imap	Version 2004b
University Of Washington Uw Imap	Version 2004c
University Of Washington Uw Imap	Version 2004d
University Of Washington Uw Imap	Version 2004e

References (88)

ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U (unsafe URL)

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html

Source: cve@mitre.org

Patch

http://rhn.redhat.com/errata/RHSA-2006-0276.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2006-0549.html

Source: cve@mitre.org

http://secunia.com/advisories/17062/

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/17148

Source: cve@mitre.org

http://secunia.com/advisories/17152

Source: cve@mitre.org

http://secunia.com/advisories/17215

Source: cve@mitre.org

http://secunia.com/advisories/17276

Source: cve@mitre.org

http://secunia.com/advisories/17336

Source: cve@mitre.org

http://secunia.com/advisories/17483

Source: cve@mitre.org

http://secunia.com/advisories/17928

Source: cve@mitre.org

http://secunia.com/advisories/17930

Source: cve@mitre.org

http://secunia.com/advisories/17950

Source: cve@mitre.org

http://secunia.com/advisories/18554

Source: cve@mitre.org

http://secunia.com/advisories/19832

Source: cve@mitre.org

http://secunia.com/advisories/20210

Source: cve@mitre.org

http://secunia.com/advisories/20222

Source: cve@mitre.org

http://secunia.com/advisories/20951

Source: cve@mitre.org

http://secunia.com/advisories/21252

Source: cve@mitre.org

http://secunia.com/advisories/21564

Source: cve@mitre.org

http://securityreason.com/securityalert/47

Source: cve@mitre.org

http://securitytracker.com/id?1015000

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500161

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-861

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200510-10.xml

Source: cve@mitre.org

http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/933601

Source: cve@mitre.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2005:189

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:194

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2005_23_sr.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-848.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-850.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0501.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/430296/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/430303/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15009

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2685

Source: cve@mitre.org

http://www.washington.edu/imap/

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/22518

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U (unsafe URL)