CVE-2005-2878: High severity GNU Mailutils vulnerability
Published Sep 13, 2005
·Updated
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.
Affected Software
1 affected component
GNU Mailutils=0.6
Remediation
Event History
Sep 13, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2878?
CVE-2005-2878 has a high severity due to the potential for remote arbitrary code execution.
2
How do I fix CVE-2005-2878?
To fix CVE-2005-2878, upgrade GNU Mailutils to a version later than 0.6 that has addressed this vulnerability.
3
Who is affected by CVE-2005-2878?
CVE-2005-2878 affects remote authenticated users who can exploit the format string vulnerability in the SEARCH command of the imap4d server in GNU Mailutils 0.6.
4
What systems are impacted by CVE-2005-2878?
CVE-2005-2878 impacts systems running GNU Mailutils version 0.6 specifically.
5
Is CVE-2005-2878 an easy vulnerability to exploit?
Yes, CVE-2005-2878 can be exploited with relatively low effort by sending crafted SEARCH commands.