Unrated severityNVD Advisory· Published Oct 15, 2007· Updated Jun 16, 2026
CVE-2007-5466
CVE-2007-5466
Description
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
11- secunia.com/advisories/27220nvdVendor Advisory
- www.digit-labs.org/files/exploits/extremail-v4.cnvd
- www.digit-labs.org/files/exploits/extremail-v5.cnvd
- www.digit-labs.org/files/exploits/extremail-v6.cnvd
- www.digit-labs.org/files/exploits/extremail-v8.plnvd
- www.securityfocus.com/archive/1/482293nvd
- www.securityfocus.com/bid/26074nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/37209nvd
- www.exploit-db.com/exploits/4533nvd
- www.exploit-db.com/exploits/4534nvd
- www.exploit-db.com/exploits/4535nvd
News mentions
0No linked articles in our index yet.