← back
CVE-2005-2661

CVE-2005-2661

EPSS 12.1%
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/26340unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/17100/http://secunia.com/advisories/17120http://secunia.com/advisories/19113http://securityreason.com/securityalert/547http://www.debian.org/security/2005/dsa-852http://www.gentoo.org/security/en/glsa/glsa-200603-04.xmlhttp://www.securityfocus.com/bid/15048http://www.vupen.com/english/advisories/2005/2014http://www.vupen.com/english/advisories/2005/2015