Lucene search

K
cve[email protected]CVE-2005-2878
HistorySep 13, 2005 - 11:03 p.m.

CVE-2005-2878

2005-09-1323:03:00
web.nvd.nist.gov
30
cve-2005-2878
format string vulnerability
gnu mailutils
imap4d server
remote code execution
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.896 High

EPSS

Percentile

98.8%

Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.

Affected configurations

NVD
Node
gnumailutilsMatch0.6
CPENameOperatorVersion
gnu:mailutilsgnu mailutilseq0.6

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.896 High

EPSS

Percentile

98.8%