Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2005-2933 Details

Description

Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U	CVE
ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc	CVE
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html	CVE	Patch
http://rhn.redhat.com/errata/RHSA-2006-0276.html	CVE
http://rhn.redhat.com/errata/RHSA-2006-0549.html	CVE
http://secunia.com/advisories/17062/	CVE	PatchVendor Advisory
http://secunia.com/advisories/17148	CVE
http://secunia.com/advisories/17152	CVE
http://secunia.com/advisories/17215	CVE
http://secunia.com/advisories/17276	CVE
http://secunia.com/advisories/17336	CVE
http://secunia.com/advisories/17483	CVE
http://secunia.com/advisories/17928	CVE
http://secunia.com/advisories/17930	CVE
http://secunia.com/advisories/17950	CVE
http://secunia.com/advisories/18554	CVE
http://secunia.com/advisories/19832	CVE
http://secunia.com/advisories/20210	CVE
http://secunia.com/advisories/20222	CVE
http://secunia.com/advisories/20951	CVE
http://secunia.com/advisories/21252	CVE
http://secunia.com/advisories/21564	CVE
http://securityreason.com/securityalert/47	CVE
http://securitytracker.com/id?1015000	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/22518	CVE
http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500161	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858	CVE
http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm	CVE
http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm	CVE
http://www.debian.org/security/2005/dsa-861	CVE
http://www.gentoo.org/security/en/glsa/glsa-200510-10.xml	CVE
http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true	CVE	PatchVendor Advisory
http://www.kb.cert.org/vuls/id/933601	CVE	US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2005:189	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2005:194	CVE
http://www.novell.com/linux/security/advisories/2005_23_sr.html	CVE
http://www.redhat.com/support/errata/RHSA-2005-848.html	CVE
http://www.redhat.com/support/errata/RHSA-2005-850.html	CVE
http://www.redhat.com/support/errata/RHSA-2006-0501.html	CVE
http://www.securityfocus.com/archive/1/430296/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/430303/100/0/threaded	CVE
http://www.securityfocus.com/bid/15009	CVE
http://www.vupen.com/english/advisories/2006/2685	CVE
http://www.washington.edu/imap/	CVE	Patch
ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U	[email protected]
ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc	[email protected]
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html	[email protected]	Patch
http://rhn.redhat.com/errata/RHSA-2006-0276.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2006-0549.html	[email protected]
http://secunia.com/advisories/17062/	[email protected]	PatchVendor Advisory
http://secunia.com/advisories/17148	[email protected]
http://secunia.com/advisories/17152	[email protected]
http://secunia.com/advisories/17215	[email protected]
http://secunia.com/advisories/17276	[email protected]
http://secunia.com/advisories/17336	[email protected]
http://secunia.com/advisories/17483	[email protected]
http://secunia.com/advisories/17928	[email protected]
http://secunia.com/advisories/17930	[email protected]
http://secunia.com/advisories/17950	[email protected]
http://secunia.com/advisories/18554	[email protected]
http://secunia.com/advisories/19832	[email protected]
http://secunia.com/advisories/20210	[email protected]
http://secunia.com/advisories/20222	[email protected]
http://secunia.com/advisories/20951	[email protected]
http://secunia.com/advisories/21252	[email protected]
http://secunia.com/advisories/21564	[email protected]
http://securityreason.com/securityalert/47	[email protected]
http://securitytracker.com/id?1015000	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/22518	[email protected]
http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500161	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858	[email protected]
http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm	[email protected]
http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm	[email protected]
http://www.debian.org/security/2005/dsa-861	[email protected]
http://www.gentoo.org/security/en/glsa/glsa-200510-10.xml	[email protected]
http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true	[email protected]	PatchVendor Advisory
http://www.kb.cert.org/vuls/id/933601	[email protected]	US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2005:189	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2005:194	[email protected]
http://www.novell.com/linux/security/advisories/2005_23_sr.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2005-848.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2005-850.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2006-0501.html	[email protected]
http://www.securityfocus.com/archive/1/430296/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/430303/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/15009	[email protected]
http://www.vupen.com/english/advisories/2006/2685	[email protected]
http://www.washington.edu/imap/	[email protected]	Patch

see all 88 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
university of washington uw-imap	<= 2004f 2004 2004a 2004b 2004c
CPE cpe:2.3:a:university_of_washington:uw-imap:::::::: cpe:2.3:a:university_of_washington:uw-imap:2004:::::::* cpe:2.3:a:university_of_washington:uw-imap:2004a:::::::* cpe:2.3:a:university_of_washington:uw-imap:2004b:::::::* cpe:2.3:a:university_of_washington:uw-imap:2004c:::::::* cpe:2.3:a:university_of_washington:uw-imap:2004d:::::::* cpe:2.3:a:university_of_washington:uw-imap:2004e:::::::* Remediation No remediation found in references.

Product

Versions

university of washington uw-imap

<= 2004f

2004

2004a

2004b

2004c

CPE

cpe:2.3:a:university_of_washington:uw-imap:*:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:uw-imap:2004:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:uw-imap:2004a:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:uw-imap:2004b:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:uw-imap:2004c:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:uw-imap:2004d:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:uw-imap:2004e:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 19, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 11, 2017	CVE Modified	[email protected]
Oct 14, 2005	Initial Analysis	[email protected]