CVE-2005-2933: university_of_washington uw-imap

CVSS: 7.5v2.0HighModified

AliasesRHSA-2005:848RHSA-2005:850DEBIAN-CVE-2005-2933+1 more

Published 13-10-2005Last modified 07-08-2024

Some data may be incomplete

2 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2005-2933 is a high (CVSS 7.5) vulnerability in university_of_washington uw-imap. EPSS estimates a 8.46% chance of exploitation in the next 30 days, higher than 94.9% of scored vulnerabilities.

Overall risk

32/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

8.46%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

RHSA-2006:0276

Timeline

13-10-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

8.46%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.46% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.46%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat7 products

imap< 1:2002d-12
imap-debuginfo< 1:2002d-12
imap-devel< 1:2002d-12
imap-utils< 1:2002d-12
libc-client< 0:2002e-14

Show all 7

Debian1 product

uw-imap< 7:2002edebian1-12 | < 7:2002edebian1-11sarge1

University_of_washington1 product

uw-imap≤ 2004f | 2004 | 2004a | 2004b | 2004c | 2004d | 2004e

3 vendors · 9 products

References

54 links

www.mandriva.com/security/advisories?name=MDKSA-2005:194Vendor AdvisoryX Refsource MANDRIVA
www.redhat.com/support/errata/RHSA-2005-850.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/17950Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21252Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17276Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17148Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20222Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20210Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2006-160.htmX Refsource CONFIRM
secunia.com/advisories/18554Third Party AdvisoryX Refsource SECUNIA

Show all 54 references

securityreason.com/securityalert/47Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/17152Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2006-0276.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2005/dsa-861Vendor AdvisoryX Refsource DEBIAN
archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.htmlMailing ListX Refsource FULLDISCPatch
secunia.com/advisories/17062/Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/15009VDB EntryX Refsource BID
www.washington.edu/imap/X Refsource CONFIRMPatch
www.redhat.com/support/errata/RHSA-2006-0501.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/support/errata/RHSA-2005-848.htmlVendor AdvisoryX Refsource REDHAT
rhn.redhat.com/errata/RHSA-2006-0549.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/20951Third Party AdvisoryX Refsource SECUNIA
www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=trueThird Party AdvisoryX Refsource IDEFENSEPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/22518VDB EntryX Refsource XF
support.avaya.com/elmodocs2/security/ASA-2006-129.htmX Refsource CONFIRM
www.securityfocus.com/archive/1/430296/100/0/threadedVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/19832Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17930Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1015000VDB EntryX Refsource SECTRACK
www.kb.cert.org/vuls/id/933601Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.gentoo.org/security/en/glsa/glsa-200510-10.xmlVendor AdvisoryX Refsource GENTOO
slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500161Vendor AdvisoryX Refsource SLACKWARE
secunia.com/advisories/21564Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/430303/100/0/threadedVendor AdvisoryX Refsource FEDORA
www.mandriva.com/security/advisories?name=MDKSA-2005:189Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/17928Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17336Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/2685VDB EntryX Refsource VUPEN
secunia.com/advisories/17215Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2005_23_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/17483Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2005:848Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=171344REPORT
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_848.jsonAdvisory
access.redhat.com/security/cve/CVE-2005-2933REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617767REPORT
www.cve.org/CVERecord?id=CVE-2005-2933Advisory
nvd.nist.gov/vuln/detail/CVE-2005-2933Advisory
access.redhat.com/errata/RHSA-2005:850Advisory
bugzilla.redhat.com/show_bug.cgi?id=169953REPORT
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_850.jsonAdvisory
security-tracker.debian.org/tracker/CVE-2005-2933Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities