Unrated severityNVD Advisory· Published Oct 14, 2005· Updated Apr 16, 2026
CVE-2005-2661
CVE-2005-2661
Description
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.
Affected products
2cpe:2.3:a:up-imapproxy:up-imapproxy:1.2.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:up-imapproxy:up-imapproxy:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:up-imapproxy:up-imapproxy:1.2.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- www.debian.org/security/2005/dsa-852nvdPatchVendor Advisory
- secunia.com/advisories/17100/nvdVendor Advisory
- secunia.com/advisories/17120nvd
- secunia.com/advisories/19113nvd
- securityreason.com/securityalert/547nvd
- www.gentoo.org/security/en/glsa/glsa-200603-04.xmlnvd
- www.securityfocus.com/bid/15048nvd
- www.vupen.com/english/advisories/2005/2014nvd
- www.vupen.com/english/advisories/2005/2015nvd
News mentions
0No linked articles in our index yet.