CVE-2009-0671

uw-imap: remote format string vulnerability

View on CVE.org
Published Feb 22, 2009 CVSS n/a EPSS n/a KEV · Not listed
Description
Format string vulnerability in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit imap-2007d and other applications, allows remote attackers to execute arbitrary code via format string specifiers in the initial request to the IMAP port (143/tcp). NOTE: Red Hat has disputed the vulnerability, stating "The Red Hat Security Response Team have been unable to confirm the existence of this format string vulnerability in the toolkit, and the sample published exploit is not complete or functional." CVE agrees that the exploit contains syntax errors and uses Unix-only include files while invoking Windows functions

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available

Subscriptions

No data.

Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
mitre
Published
Updated
Aug 16, 2017, 2:57 PM
Reserved
Feb 22, 2009, 12:00 AM

View source JSON

No data.

Status
Rejected
Published
Feb 22, 2009, 10:30 PM
Modified
Nov 7, 2023, 2:03 AM

View source JSON

Severity
Critical
Public date
Feb 17, 2009, 12:00 AM

View source Bugzilla JSON

No data.