Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2005-2933

UNKNOWN

Buffer overflow in the mail_valid_net_parse_work function in mail

Published Oct 13, 2005

Modified 1 years ago

Details

Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.

References

ADVISORYftp://patches.sgi.com/support/free/security/advisories/20051201-01-U ADVISORYftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc WEBhttp://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html ADVISORYhttp://rhn.redhat.com/errata/RHSA-2006-0276.html ADVISORYhttp://rhn.redhat.com/errata/RHSA-2006-0549.html ADVISORYhttp://secunia.com/advisories/17062/ADVISORYhttp://secunia.com/advisories/17148 ADVISORYhttp://secunia.com/advisories/17152 ADVISORYhttp://secunia.com/advisories/17215 ADVISORYhttp://secunia.com/advisories/17276 ADVISORYhttp://secunia.com/advisories/17336 ADVISORYhttp://secunia.com/advisories/17483 ADVISORYhttp://secunia.com/advisories/17928 ADVISORYhttp://secunia.com/advisories/17930 ADVISORYhttp://secunia.com/advisories/17950 ADVISORYhttp://secunia.com/advisories/18554 ADVISORYhttp://secunia.com/advisories/19832 ADVISORYhttp://secunia.com/advisories/20210 ADVISORYhttp://secunia.com/advisories/20222 ADVISORYhttp://secunia.com/advisories/20951 ADVISORYhttp://secunia.com/advisories/21252 ADVISORYhttp://secunia.com/advisories/21564 ADVISORYhttp://securityreason.com/securityalert/47 WEBhttp://securitytracker.com/id?1015000 ADVISORYhttp://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500161 WEBhttp://support.avaya.com/elmodocs2/security/ASA-2006-129.htm WEBhttp://support.avaya.com/elmodocs2/security/ASA-2006-160.htm ADVISORYhttp://www.debian.org/security/2005/dsa-861 ADVISORYhttp://www.gentoo.org/security/en/glsa/glsa-200510-10.xml ADVISORYhttp://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true ADVISORYhttp://www.kb.cert.org/vuls/id/933601 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:189 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:194 ADVISORYhttp://www.novell.com/linux/security/advisories/2005_23_sr.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2005-848.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2005-850.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2006-0501.html ADVISORYhttp://www.securityfocus.com/archive/1/430296/100/0/threaded ADVISORYhttp://www.securityfocus.com/archive/1/430303/100/0/threaded WEBhttp://www.securityfocus.com/bid/15009 WEBhttp://www.vupen.com/english/advisories/2006/2685 WEBhttp://www.washington.edu/imap/WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/22518 WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2005-2933

CVSS Analysis

CVSS v2.0

7.5

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

PartialI:P

Availability

PartialA:P

7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P

Ecosystems

Timeline

PublishedOct 13, 2005

ModifiedAug 7, 2024

CVE-2005-2933 | Mondoo Vulnerability Intelligence