CVE-2008-5005 Memory corruption in n/a
Remote attackers can execute arbitrary code via crafted emails, and local users can gain privileges through command-line arguments in IMAP Toolkit tools.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-5005?
CVE-2008-5005 is a critical memory corruption vulnerability in n/a, published on 10 Nov 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.
Weakness: CWE-119
Which versions are affected by CVE-2008-5005?
It affects 2 products.
Linux distribution packages (16)
imap Red Hat:enterprise_linux:3::as | All versions | 1:2002d-15 |
imap-debuginfo Red Hat:enterprise_linux:3::as | All versions | 1:2002d-15 |
imap-devel Red Hat:enterprise_linux:3::as | All versions | 1:2002d-15 |
imap-utils Red Hat:enterprise_linux:3::as | All versions | 1:2002d-15 |
imap Red Hat:enterprise_linux:3::desktop | All versions | 1:2002d-15 |
imap-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 1:2002d-15 |
imap-devel Red Hat:enterprise_linux:3::desktop | All versions | 1:2002d-15 |
imap-utils Red Hat:enterprise_linux:3::desktop | All versions | 1:2002d-15 |
imap Red Hat:enterprise_linux:3::es | All versions | 1:2002d-15 |
imap-debuginfo Red Hat:enterprise_linux:3::es | All versions | 1:2002d-15 |
imap-devel Red Hat:enterprise_linux:3::es | All versions | 1:2002d-15 |
imap-utils Red Hat:enterprise_linux:3::es | All versions | 1:2002d-15 |
imap Red Hat:enterprise_linux:3::ws | All versions | 1:2002d-15 |
imap-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 1:2002d-15 |
imap-devel Red Hat:enterprise_linux:3::ws | All versions | 1:2002d-15 |
imap-utils Red Hat:enterprise_linux:3::ws | All versions | 1:2002d-15 |
Products include University of Washington Alpine, University of Washington Imap Toolkit.
How do I fix CVE-2008-5005?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2008-5005 being exploited?
There is no known exploitation of CVE-2008-5005 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2008-5005, GHSA-9hgh-p6fq-92mm, RHSA-2009:0275.