CVE-2005-2933

Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute…

published October 13, 2005

CVSS
—
EPSS
8%
Percentile
95.0
In the wild
Unconfirmed
What it is

Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08464 · 95.0th percentile
Published
2005-10-13T04:00Z
EPSS history
Timeline
  • 13 OCT 04:00Z
    Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute…
    cvelistv5