CVE-2005-2878

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 15%

from disclosure to weapon0 days

Published on NVDSep 13

1st PoCSep 10

exploitation probability

15%top 4% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1209 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1234 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/3787

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=bugtraq&m=112785181316043&w=2 http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407 http://secunia.com/advisories/16783 http://secunia.com/advisories/17020 http://www.debian.org/security/2005/dsa-841 http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true http://www.rosiello.org/archivio/imap4d_FreeBSD_exploit.c http://www.securityfocus.com/bid/14794