CVE-2005-2878
HIGH 7.5EPSS 14.6%
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 14.57% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2005-09-13
- Updated
- 2024-08-07
Proof-of-concept exploits (1)
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/3787
- https://www.exploit-db.com/exploits/1234
- https://www.exploit-db.com/exploits/1209
Security advisories
- http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=t…
- http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407
- http://www.securityfocus.com/bid/14794