Unrated severityNVD Advisory· Published Oct 14, 2005· Updated Jun 16, 2026
CVE-2005-2661
CVE-2005-2661
Description
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3=1.2.3, =1.2.4+ 2 more
- (no CPE)range: =1.2.3, =1.2.4
- cpe:2.3:a:up-imapproxy:up-imapproxy:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:up-imapproxy:up-imapproxy:1.2.4:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
9- www.debian.org/security/2005/dsa-852nvdPatchVendor Advisory
- secunia.com/advisories/17100/nvdVendor Advisory
- secunia.com/advisories/17120nvd
- secunia.com/advisories/19113nvd
- securityreason.com/securityalert/547nvd
- www.gentoo.org/security/en/glsa/glsa-200603-04.xmlnvd
- www.securityfocus.com/bid/15048nvd
- www.vupen.com/english/advisories/2005/2014nvd
- www.vupen.com/english/advisories/2005/2015nvd
News mentions
0No linked articles in our index yet.