CVE-1999-0005: Buffer Overflow

Published Jul 20, 1998

Updated

Arbitrary command execution via IMAP buffer overflow in authenticate command.

Affected Software

2 affected components

Netscape Messaging Server=3.55

University of Washington IMAP=10.234

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove Sun iPlanet Messaging Server from your environment.
If IMAP functionality is not required, uninstall or disable the IMAP component of Sun iPlanet Messaging Server until a vendor fix is available.
Remove
Remove University of Washington UW-IMAP from your environment.
If IMAP functionality is not required, uninstall or disable UW-IMAP until a vendor fix is available.
Configuration
Disable the IMAP authenticate command or stop/disable the IMAP service on affected servers until a vendor-supplied fix is available.
IMAP (authenticate command) in Sun iPlanet Messaging Server / University of Washington UW-IMAP IMAP authentication/authenticate command = disabled / stop IMAP service
Compensating control
Restrict access to the IMAP service to trusted IP addresses using firewall rules or network ACLs; block or limit IMAP access from untrusted networks until the issue is remediated.

Jul 20, 1998

CVE Published

04:00 AM

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Sep 29, 1999

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

CVE-1999-0005 is categorized as a high severity vulnerability due to the potential for arbitrary command execution.

To fix CVE-1999-0005, upgrade to a patched version of the affected software that addresses the buffer overflow issue.

CVE-1999-0005 affects Sun iPlanet Messaging Server version 3.55 and University of Washington IMAP version 10.234.

CVE-1999-0005 is an arbitrary command execution vulnerability caused by a buffer overflow in the IMAP authenticate command.

CVE-1999-0005 can allow an attacker to execute arbitrary commands on the server, compromising its integrity and security.