CVE-2005-1522

GNU Mailutils < 0.6.90 - Authenticated Denial of Service via FETCH Command

Title source: llm
STIX 2.1

Description

The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.

References (5)

Core 5
Core References
Patch third-party-advisory x_refsource_idefense
http://www.idefense.com/application/poi/display?id=247&type=vulnerabilities
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014052
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15442
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13765
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-732

Scores

EPSS 0.0091
EPSS Percentile 76.1%

Details

Status published
Products (2)
gnu/mailutils 0.5
gnu/mailutils 0.6
Published May 26, 2005
Tracked Since Feb 18, 2026