GCVE - cpe:2.3:a:gnu:mailutils:0.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:mailutils:0.6:*:*:*:*:*:*:*

part: a version: 0.6 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Mailutils (`76c1c8d0-7ba7-5fa6-b776-01814be95308`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/mailutils`	purl2cpe	2026-06-01 10:11:55.099214
`pkg:deb/ubuntu/mailutils`	purl2cpe	2026-06-01 10:11:55.099215
`pkg:github/chadjoan/mailutils`	purl2cpe	2026-06-01 10:11:55.099217
`pkg:github/distrotech/mailutils`	purl2cpe	2026-06-01 10:11:55.099218
`pkg:github/gnu-mirror-unofficial/mailutils`	purl2cpe	2026-06-01 10:11:55.099220
`pkg:gnu/mailutils`	purl2cpe	2026-06-01 10:11:55.099221
`pkg:rpm/opensuse/mailutils`	purl2cpe	2026-06-01 10:11:55.099223

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-2878`	vulnerable	2026-06-08 04:48:30.817353	Details available Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command. Published: 2005-09-13T04:00:00.000Z Updated: 2024-08-07T22:53:29.679Z Open on db.gcve.eu Reference links http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407 http://secunia.com/advisories/17020 http://www.gentoo.org/security/en/glsa/glsa-200509-10.xml http://secunia.com/advisories/16783 http://www.idefense.com/application/poi/display?id=303&type=vulnerabilities&flashstatus=true	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1523`	vulnerable	2026-06-08 04:48:26.822734	Details available Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands. Published: 2005-05-26T04:00:00.000Z Updated: 2024-08-07T21:51:50.475Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1014052 http://www.idefense.com/application/poi/display?id=246&type=vulnerabilities http://secunia.com/advisories/15442 http://www.debian.org/security/2005/dsa-732 http://www.securityfocus.com/bid/13764	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1522`	vulnerable	2026-06-08 04:48:26.822434	Details available The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command. Published: 2005-05-26T04:00:00.000Z Updated: 2024-08-07T21:51:50.298Z Open on db.gcve.eu Reference links http://www.idefense.com/application/poi/display?id=247&type=vulnerabilities http://securitytracker.com/id?1014052 http://secunia.com/advisories/15442 http://www.securityfocus.com/bid/13765 http://www.debian.org/security/2005/dsa-732	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1521`	vulnerable	2026-06-08 04:48:26.822089	Details available Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow. Published: 2005-05-26T04:00:00.000Z Updated: 2024-08-07T21:51:50.368Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1014052 http://www.securityfocus.com/bid/13763 http://www.idefense.com/application/poi/display?id=248&type=vulnerabilities http://secunia.com/advisories/15442 http://www.debian.org/security/2005/dsa-732	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1520`	vulnerable	2026-06-08 04:48:26.821681	Details available Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-mail. Published: 2005-05-26T04:00:00.000Z Updated: 2024-08-07T21:51:50.255Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1014052 http://www.securityfocus.com/bid/13766 http://secunia.com/advisories/15442 http://www.debian.org/security/2005/dsa-732 http://www.idefense.com/application/poi/display?id=249&type=vulnerabilities	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.