CVE-2005-3640

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-16 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.

Affected products

Floosietek Ftgate: 4_4.1

References

http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html
http://secunia.com/advisories/17609
http://www.lucaercoli.it/advs/FTGate4.txt
http://www.osvdb.org/20917
http://www.securityfocus.com/bid/15449
http://www.vupen.com/english/advisories/2005/2478
https://exchange.xforce.ibmcloud.com/vulnerabilities/23101
http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html
http://secunia.com/advisories/17609
http://www.lucaercoli.it/advs/FTGate4.txt
http://www.osvdb.org/20917
http://www.securityfocus.com/bid/15449

Get alerted when CVE-2005-3640 or the next vulnerability affects your stack