GNU Mailutils Multiple IMAP Vulnerabilities

Medium Nessus Network Monitor Plugin ID 2938


The remote host is vulnerable to a buffer overflow.


The remote host is running GNU Mailutils, an open source package that includes tools for running and managing a mail server. This version of GNU Mailutils is vulnerable to several remote buffer overflows. An attacker exploiting these flaws will be able to execute arbitrary code.


Upgrade or patch according to vendor recommendations.

See Also

Plugin Details

Severity: Medium

ID: 2938

Family: POP Server

Published: 2005/05/25

Updated: 2019/03/06

Dependencies: 1086

Nessus ID: 18371, 19605

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 5.8

Temporal Score: 4.8

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSS v3.0

Base Score: 6.3

Temporal Score: 5.9

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:gnu:mailutils

Reference Information

CVE: CVE-2005-2878, CVE-2005-1824, CVE-2005-1521, CVE-2005-1520, CVE-2005-1522, CVE-2005-1523

BID: 13763, 13870, 13764, 13765, 13766, 14794