CVE-2005-0546: Buffer Overflow
Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0546?
CVE-2005-0546 is classified as a critical vulnerability due to potential remote code execution.
How do I fix CVE-2005-0546?
To remediate CVE-2005-0546, upgrade to Cyrus IMAPd version 2.2.11 or later.
What types of buffer overflows are associated with CVE-2005-0546?
CVE-2005-0546 includes multiple buffer overflow vulnerabilities, including stack-based buffer overflows and off-by-one errors.
Which versions of Cyrus IMAP are affected by CVE-2005-0546?
CVE-2005-0546 affects Cyrus IMAPd versions 2.0.17, 2.1.16, 2.1.17, 2.1.18, and 2.2.10.
Can CVE-2005-0546 be exploited remotely?
Yes, CVE-2005-0546 can be exploited remotely, allowing attackers to execute arbitrary code without physical access.