CVE-2005-2933 PUBLISHED CVSS 7.5 HIGH

Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.

EPSS 35.08% · 97.0th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
35.08%
97.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
university_of_washingtonuw-imap0, 2004, 2004a

Timeline

References

…and 27 more

Open in Interactive Console →