Lucene search

K
cve[email protected]CVE-2005-1523
HistoryMay 26, 2005 - 4:00 a.m.

CVE-2005-1523

2005-05-2604:00:00
web.nvd.nist.gov
34
cve-2005-1523
format string vulnerability
imap4d server
gnu mailutils
nvd
imap commands.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.824 High

EPSS

Percentile

98.4%

Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.

Affected configurations

NVD
Node
gnumailutilsMatch0.5
OR
gnumailutilsMatch0.6

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.824 High

EPSS

Percentile

98.4%