CVE-2005-2933: Buffer Overflow
Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2933?
CVE-2005-2933 has a CVSS score indicating a critical severity level due to the potential for remote code execution.
How do I fix CVE-2005-2933?
To mitigate CVE-2005-2933, upgrade the UW-IMAP server to version 2004g or later.
What type of attack does CVE-2005-2933 allow?
CVE-2005-2933 allows remote attackers to execute arbitrary code via a crafted mailbox name.
Which versions of UW-IMAP are affected by CVE-2005-2933?
CVE-2005-2933 affects UW-IMAP versions prior to 2004g, specifically versions 2004f and earlier.
Is CVE-2005-2933 specific to certain platforms?
CVE-2005-2933 is specific to the University of Washington's IMAP server implementation.