Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-5005

Опубликовано: 10 нояб. 2008
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:university_of_washington:alpine:0.80:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:0.81:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:0.82:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:0.83:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:0.98:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:0.99:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:0.999:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:0.9999:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:0.99999:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:0.999999:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:1.00:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:1.10:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:alpine:2.00:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap_toolkit:2002:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap_toolkit:2003:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap_toolkit:2004:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap_toolkit:2005:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap_toolkit:2006:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap_toolkit:2007:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap_toolkit:2007c:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.06194
Низкий

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 17 лет назад

Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.

redhat
около 17 лет назад

Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.

debian
около 17 лет назад

Multiple stack-based buffer overflows in (1) University of Washington ...

github
больше 3 лет назад

Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.

fstec
почти 11 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 90%
0.06194
Низкий

10 Critical

CVSS2

Дефекты

CWE-119