Vulnerability in Up-Imapproxy
CVE-2005-2661
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.
EPSS: 0.121 (95.7th percentile) — read the EPSS interpretation.
Affected products
- Up-imapproxy — versions 1.2.3, 1.2.4
- N/a — versions n/a
References
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vendor-advisory, x_refsource_GENTOO)
- security@debian.org (vdb-entry, x_refsource_BID)
- security@debian.org (vdb-entry, x_refsource_VUPEN)
- security@debian.org (x_refsource_SREASON, third-party-advisory)
- security@debian.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- security@debian.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_VUPEN)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)