CVE-2005-2878 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 14.6% (pctl 97)
Patch early
A public exploit exists.
Description
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 14.57% — more likely to be exploited than 97% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-09-13 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| gnu | mailutils |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | GNU Mailutils imap4d 0.6 - exec-shield Remote Format String | 2007-04-24 |
| exploit-db | GNU Mailutils imap4d 0.6 (FreeBSD) - 'Search' Remote Format String | 2005-09-26 |
| exploit-db | GNU Mailutils imap4d 0.6 - 'Search' Remote Format String | 2005-09-10 |
References
- http://marc.info/?l=bugtraq&m=112785181316043&w=2
- http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407
- http://secunia.com/advisories/16783
- http://secunia.com/advisories/17020
- http://www.debian.org/security/2005/dsa-841
- http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml
- http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true
- http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c
- http://www.securityfocus.com/bid/14794
- http://marc.info/?l=bugtraq&m=112785181316043&w=2
- http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407
- http://secunia.com/advisories/16783
- http://secunia.com/advisories/17020
- http://www.debian.org/security/2005/dsa-841
- http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml
- http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true
- http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c
- http://www.securityfocus.com/bid/14794
→ the Explorer · watch your stack · NVD