CVE-2005-1523

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-26 · updated 2026-06-16

Description

Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.

Affected products

GNU Mailutils: 0.5, 0.6

References

http://secunia.com/advisories/15442
http://securitytracker.com/id?1014052
http://www.debian.org/security/2005/dsa-732
http://www.idefense.com/application/poi/display?id=246&type=vulnerabilities
http://www.securityfocus.com/bid/13764
http://secunia.com/advisories/15442
http://securitytracker.com/id?1014052
http://www.debian.org/security/2005/dsa-732
http://www.idefense.com/application/poi/display?id=246&type=vulnerabilities
http://www.securityfocus.com/bid/13764

Get alerted when CVE-2005-1523 or the next vulnerability affects your stack