{"schemaVersion":3,"id":"CVE-2008-5005","aliases":["RHSA-2009:0275","DEBIAN-CVE-2008-5005"],"status":"published","duplicateOf":null,"title":null,"description":"Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.","dates":{"published":"2008-11-10T11:00:00.000Z","modified":"2024-08-07T10:40:16.768Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.06355,"percentile":0.93576,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.06355},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.06355,"percentile":0.93576}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06355,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.06355,"percentile":0.93576}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"debian","product":"uw-imap","name":"uw-imap","label":"uw-imap","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/uw-imap","purlType":"deb","versions":[{"text":"< 7:2007d~dfsg-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7:2007d~dfsg-1","eol":null,"hubHref":null},{"vendor":"redhat","product":"imap","name":"imap","label":"imap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/imap","purlType":"rpm","versions":[{"text":"< 1:2002d-15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2002d-15","eol":null,"hubHref":null},{"vendor":"redhat","product":"imap-debuginfo","name":"imap-debuginfo","label":"imap-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/imap-debuginfo","purlType":"rpm","versions":[{"text":"< 1:2002d-15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2002d-15","eol":null,"hubHref":null},{"vendor":"redhat","product":"imap-devel","name":"imap-devel","label":"imap-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/imap-devel","purlType":"rpm","versions":[{"text":"< 1:2002d-15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2002d-15","eol":null,"hubHref":null},{"vendor":"redhat","product":"imap-utils","name":"imap-utils","label":"imap-utils","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/imap-utils","purlType":"rpm","versions":[{"text":"< 1:2002d-15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2002d-15","eol":null,"hubHref":null},{"vendor":"university_of_washington","product":"alpine","name":"alpine","label":"alpine","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"0.80","noFixRecorded":false,"fixedIn":null},{"text":"0.81","noFixRecorded":false,"fixedIn":null},{"text":"0.82","noFixRecorded":false,"fixedIn":null},{"text":"0.83","noFixRecorded":false,"fixedIn":null},{"text":"0.98","noFixRecorded":false,"fixedIn":null},{"text":"0.99","noFixRecorded":false,"fixedIn":null},{"text":"0.999","noFixRecorded":false,"fixedIn":null},{"text":"0.9999","noFixRecorded":false,"fixedIn":null},{"text":"0.99999","noFixRecorded":false,"fixedIn":null},{"text":"0.999999","noFixRecorded":false,"fixedIn":null},{"text":"1.00","noFixRecorded":false,"fixedIn":null},{"text":"1.10","noFixRecorded":false,"fixedIn":null},{"text":"2.00","noFixRecorded":false,"fixedIn":null}],"versionsText":"0.80 | 0.81 | 0.82 | 0.83 | 0.98 | 0.99 | 0.999 | 0.9999 | 0.99999 | 0.999999 | 1.00 | 1.10 | 2.00","eol":null,"hubHref":"/vendor/university_of_washington/alpine"},{"vendor":"university_of_washington","product":"imap_toolkit","name":"imap toolkit","label":"imap_toolkit","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2002","noFixRecorded":false,"fixedIn":null},{"text":"2003","noFixRecorded":false,"fixedIn":null},{"text":"2004","noFixRecorded":false,"fixedIn":null},{"text":"2005","noFixRecorded":false,"fixedIn":null},{"text":"2006","noFixRecorded":false,"fixedIn":null},{"text":"2007","noFixRecorded":false,"fixedIn":null},{"text":"2007c","noFixRecorded":false,"fixedIn":null}],"versionsText":"2002 | 2003 | 2004 | 2005 | 2006 | 2007 | 2007c","eol":null,"hubHref":"/vendor/university_of_washington/imap_toolkit"}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10485","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10485","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://panda.com/imap/","label":"panda.com/imap/","hostname":"panda.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/3","label":"www.openwall.com/lists/oss-security/2008/11/03/3","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00082.html","label":"www.redhat.com/archives/fedora-package-announce/2008-November/msg00082.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://www.bitsec.com/en/rad/bsa-081103.txt","label":"www.bitsec.com/en/rad/bsa-081103.txt","hostname":"www.bitsec.com","tags":["X Refsource MISC","URL Repurposed"]},{"url":"http://www.bitsec.com/en/rad/bsa-081103.c","label":"www.bitsec.com/en/rad/bsa-081103.c","hostname":"www.bitsec.com","tags":["X Refsource MISC","URL Repurposed"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-065.htm","label":"support.avaya.com/elmodocs2/security/ASA-2009-065.htm","hostname":"support.avaya.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/5","label":"www.openwall.com/lists/oss-security/2008/11/03/5","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://www.washington.edu/alpine/tmailbug.html","label":"www.washington.edu/alpine/tmailbug.html","hostname":"www.washington.edu","tags":["X Refsource MISC"]},{"url":"http://securityreason.com/securityalert/4570","label":"securityreason.com/securityalert/4570","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://www.securityfocus.com/archive/1/498002/100/0/threaded","label":"www.securityfocus.com/archive/1/498002/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002268.html","label":"mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002268.html","hostname":"mailman2.u.washington.edu","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://www.debian.org/security/2008/dsa-1685","label":"www.debian.org/security/2008/dsa-1685","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/32483","label":"secunia.com/advisories/32483","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32072","label":"www.securityfocus.com/bid/32072","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46281","label":"exchange.xforce.ibmcloud.com/vulnerabilities/46281","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://secunia.com/advisories/33142","label":"secunia.com/advisories/33142","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00058.html","label":"www.redhat.com/archives/fedora-package-announce/2008-November/msg00058.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=469667","label":"bugzilla.redhat.com/show_bug.cgi?id=469667","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Patch","REPORT"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0275.html","label":"rhn.redhat.com/errata/RHSA-2009-0275.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://marc.info/?l=full-disclosure&m=122572590212610&w=4","label":"marc.info?l=full-disclosure&m=122572590212610&w=4","hostname":"marc.info","tags":["Mailing List","X Refsource FULLDISC"]},{"url":"http://mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267.html","label":"mailman2.u.washington.edu/pipermail/imap-uw/2008-October/002267.html","hostname":"mailman2.u.washington.edu","tags":["Mailing List","X Refsource MLIST","Patch"]},{"url":"http://secunia.com/advisories/33996","label":"secunia.com/advisories/33996","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:146","label":"www.mandriva.com/security/advisories?name=MDVSA-2009:146","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/32512","label":"secunia.com/advisories/32512","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.openwall.com/lists/oss-security/2008/11/03/4","label":"www.openwall.com/lists/oss-security/2008/11/03/4","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://www.vupen.com/english/advisories/2008/3042","label":"www.vupen.com/english/advisories/2008/3042","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://securitytracker.com/id?1021131","label":"securitytracker.com/id?1021131","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://access.redhat.com/errata/RHSA-2009:0275","label":"access.redhat.com/errata/RHSA-2009:0275","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0275.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0275.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-5005","label":"access.redhat.com/security/cve/CVE-2008-5005","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-5005","label":"www.cve.org/CVERecord?id=CVE-2008-5005","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5005","label":"nvd.nist.gov/vuln/detail/CVE-2008-5005","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-5005","label":"security-tracker.debian.org/tracker/CVE-2008-5005","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1685-1","DTSA-174-1","DTSA-174-2"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2008-11-10T11:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T10:40:16.768Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:06:10.046Z","stale":false,"partial":false}}