GNU Mailutils Multiple IMAP Vulnerabilities

Medium Nessus Network Monitor Plugin ID 2938

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is running GNU Mailutils, an open source package that includes tools for running and managing a mail server. This version of GNU Mailutils is vulnerable to several remote buffer overflows. An attacker exploiting these flaws will be able to execute arbitrary code.

Solution

Upgrade or patch according to vendor recommendations.

See Also

http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities

http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407

Plugin Details

Severity: Medium

ID: 2938

Family: POP Server

Published: 2005/05/25

Modified: 2018/07/11

Dependencies: 1086

Nessus ID: 18371, 19605

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5.8

Temporal Score: 4.8

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSSv3

Base Score: 6.3

Temporal Score: 5.9

Vector: CVSS3#AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:gnu:mailutils

Reference Information

CVE: CVE-2005-2878, CVE-2005-1824, CVE-2005-1521, CVE-2005-1520, CVE-2005-1522, CVE-2005-1523

BID: 13763, 13870, 13764, 13765, 13766, 14794