CVE-2005-2661

EPSS 19.7%

up-imapproxy - arbitrary code execution

發布日:2005/10/14修改日:2026/4/28

描述

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.

受影響套件(2)

Debian/up-imapproxyfrom 0, < 1.2.4-2
Debian/up-imapproxyfrom 0, < 1.2.3-1sarge1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2005-2661