Published: 13/09/2005 Updated: 18/10/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu mailutils 0.6

/* ** ** Fedora Core 6 (exec-shield) based ** GNU imap4d mailutils-06 search remote format string exploit ** by Xpl017Elz ** ** Advanced exploitation in exec-shield (Fedora Core case study) ** URL: x82inetcoporg/h0me/papers/FC_exploit/FC_exploittxt ** ** Reference: wwwsecurityfocuscom/bid/14794 (2005/09/09) ** labsidefen ...

/* * Copyright (c) 2005 Rosiello Security * wwwrosielloorg * * Permission is granted for the redistribution of this software * electronically It may not be edited in any way without the express * written consent of Rosiello Security * * Disclaimer: The author published the information under the condition * that is not in the intention o ...

/* * GNU Mailutils 06 imap4d 'search' format string exploit * Ref: wwwidefensecom/application/poi/display?id=303&type=vulnerabilities * * This silly exploit uses hardcoded values taken from GNU/Debian testing (etch) * * $ /imap4d_search_expl -h 127001 -p 143 -u clem1 -s PROUT * [+] GNU Mailutils 06 imap4d 'search' format s ...

NVD-CWE-Other http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407 http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c http://www.debian.org/security/2005/dsa-841 http://secunia.com/advisories/16783 http://secunia.com/advisories/17020 http://www.securityfocus.com/bid/14794 http://marc.info/?l=bugtraq&m=112785181316043&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/3787/

CVE-2005-2878

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect