CVE-2007-5740

Publication date 31 October 2007

Last updated 24 July 2024


Ubuntu priority

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
perdition 7.10 gutsy
Fixed 1.17-7ubuntu0.7.10.1
7.04 feisty
Fixed 1.17-7ubuntu0.7.04.1
6.10 edgy
Fixed 1.17-7ubuntu0.6.10.1
6.06 LTS dapper
Fixed 1.17-5ubuntu0.1