CVE-2005-2083 Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format string...
MediumCVSS 5.0
EPSS 3.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format string specifiers as the second argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| truenorth software ia emailserver | = corporate_5.2.2_build_1051 | No fix listed |
| truenorth software ia emailserver | = corporate_5.2.3_build_1056 | No fix listed |
| truenorth software ia emailserver | = corporate_5.3.1 | No fix listed |
| truenorth software ia emailserver | = corporate_5.3.2 | No fix listed |
| truenorth software ia emailserver | = corporate_5.3.3 | No fix listed |
| truenorth software ia emailserver | = corporate_5.3.4_build_2018 | No fix listed |
References
- 20050627 Denial of Service Vulnerability in True North Software, Inc. IA eMailServer Corporate Edition Version: 5.2.2. Build: 1051 mailing-list
- 1014301 patch vdb-entry
- emailserver-list-dos(21169) vdb-entry