CVE-2005-2933
- State
- Published
- Severity
- Not scored
- Published
- Oct 13, 2005
- Updated
- Aug 7, 2024
- Reserved
- Sep 15, 2005
Description
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- MDKSA-2005:194vendor-advisory
- RHSA-2005:850vendor-advisory
- 17950third-party-advisory
- 21252third-party-advisory
- 17276third-party-advisory
- 17148third-party-advisory
- 20222third-party-advisory
- 20210third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm
- 18554third-party-advisory
- 47third-party-advisory
- 17152third-party-advisory
- RHSA-2006:0276vendor-advisory
- DSA-861vendor-advisory
- 20051004 iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerabilitymailing-list
- 17062third-party-advisory
- oval:org.mitre.oval:def:9858vdb-entrysignature
- 15009vdb-entry
- http://www.washington.edu/imap/
- RHSA-2006:0501vendor-advisory
- RHSA-2005:848vendor-advisory
- RHSA-2006:0549vendor-advisory
- 20951third-party-advisory
- 20051004 UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerabilitythird-party-advisory
- uw-imap-mailbox-name-bo(22518)vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm
- FLSA:170411vendor-advisory
- 19832third-party-advisory
- 17930third-party-advisory
- 1015000vdb-entry
- VU#933601third-party-advisory
- GLSA-200510-10vendor-advisory
- SSA:2005-310-06vendor-advisory
- 21564third-party-advisory
- FLSA:184098vendor-advisory
- MDKSA-2005:189vendor-advisory
- 17928third-party-advisory
- 17336third-party-advisory
- ADV-2006-2685vdb-entry
- 17215third-party-advisory
- SUSE-SR:2005:023vendor-advisory
- 17483third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.