CVE-2005-2878: gnu mailutils

EPSS trend

Probability

14.57%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 14.57% on 20-09-2026

20-09-202620-10-2026

EPSS score

14.57%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (idefense.com)
Maturity: unknown
exploit-databaseremotebsdVerified
GNU Mailutils imap4d 0.6 (FreeBSD) - 'Search' Remote Format String
Maturity: weaponized
exploit-databaseremotelinuxVerified
GNU Mailutils imap4d 0.6 - 'Search' Remote Format String
Maturity: weaponized

Show all 4 exploits

exploit-databaseremotelinuxVerified
GNU Mailutils imap4d 0.6 - exec-shield Remote Format String
Maturity: weaponized

References

10 links

savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407X Refsource CONFIRMPatch
secunia.com/advisories/17020Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200509-10.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/16783Third Party AdvisoryX Refsource SECUNIA
www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=trueThird Party AdvisoryX Refsource IDEFENSEExploitPatchVendor Advisory
www.rosiello.org/archivio/imap4d_FreeBSD_exploit.cX Refsource MISC
www.debian.org/security/2005/dsa-841Vendor AdvisoryX Refsource DEBIAN
marc.info?l=bugtraq&m=112785181316043&w=2Mailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/14794VDB EntryX Refsource BID
security-tracker.debian.org/tracker/CVE-2005-2878Advisory

Related vulnerabilities

CVE-2005-1522debianmailutils+11.67%21y ago26-05-2005 04:00The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.CVE-2005-1824debianmailutils+11.08%21y ago02-06-2005 04:00The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks.CVE-2005-1521debianmailutils+13.26%21y ago26-05-2005 04:00Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow.CVE-2005-1523debianmailutils+19.78%21y ago26-05-2005 04:00Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.CVE-2005-1520debianmailutils+16.67%21y ago26-05-2005 04:00Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-mail.CVE-2004-0984debianmailutils+10.42%21y ago21-04-2005 04:00Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.

All vulnerabilities inmailutils

CVE-2005-2878: gnu mailutils

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References