Lucene search

SAINT CorporationSAINT:791C0A548E85F8BAB15B53B15C0BCB50

HistoryDec 30, 2005 - 12:00 a.m.

Eudora WorldMail IMAP LIST command buffer overflow

2005-12-3000:00:00

SAINT Corporation

download.saintcorporation.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON

Added: 12/30/2005
CVE: CVE-2005-4267
BID: 15980
OSVDB: 22097

Background

Eudora WorldMail is an e-mail server for Windows.

Problem

A long IMAP command ending with a close brace character could result in a buffer overflow, leading to remote command execution.

Resolution

Upgrade to a version of Eudora WorldMail higher than 3.1.22.

References

<http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1014.html>

Platforms

Windows

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON

Related for SAINT:791C0A548E85F8BAB15B53B15C0BCB50