CVE-2005-2933
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server ...
7.5 HighFix available
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
Exploit likelihood
8.46%Down 3.8 points since Feb 4, 2022
What each source reports
NVD Score used
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
- Record
CVE-2005-2933- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
- Record
CVE-2005-2933- Updated
- 2026-11-02
EUVDEUVD-2005-2933 No score
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
- Record
EUVD-2005-2933- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g3w5-6ccf-62gj No score
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server ...
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
- Record
GHSA-g3w5-6ccf-62gj- Updated
- 2026-11-02
OSV No score
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
- Record
CVE-2005-2933- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2933 No score
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
- Record
DEBIAN-CVE-2005-2933- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
uw-imapDebian:12 |
before 7:2002edebian1-12 | 7:2002edebian1-12 |
uw-imapDebian:3.1 |
before 7:2002edebian1-11sarge1, plus listed versions 7:2002edebian1-11 |
7:2002edebian1-11sarge1 |
libc-clientRed Hat:enterprise_linux:4::as |
before 0:2002e-14 | 0:2002e-14 |
libc-client-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2002e-14 | 0:2002e-14 |
libc-client-develRed Hat:enterprise_linux:4::as |
before 0:2002e-14 | 0:2002e-14 |
libc-clientRed Hat:enterprise_linux:4::desktop |
before 0:2002e-14 | 0:2002e-14 |
libc-client-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2002e-14 | 0:2002e-14 |
libc-client-develRed Hat:enterprise_linux:4::desktop |
before 0:2002e-14 | 0:2002e-14 |
libc-clientRed Hat:enterprise_linux:4::es |
before 0:2002e-14 | 0:2002e-14 |
libc-client-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2002e-14 | 0:2002e-14 |
Show 112 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libc-client-develRed Hat:enterprise_linux:4::es |
before 0:2002e-14 | 0:2002e-14 |
libc-clientRed Hat:enterprise_linux:4::ws |
before 0:2002e-14 | 0:2002e-14 |
libc-client-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2002e-14 | 0:2002e-14 |
libc-client-develRed Hat:enterprise_linux:4::ws |
before 0:2002e-14 | 0:2002e-14 |
imapRed Hat:enterprise_linux:3::as |
before 1:2002d-12 | 1:2002d-12 |
imap-debuginfoRed Hat:enterprise_linux:3::as |
before 1:2002d-12 | 1:2002d-12 |
imap-develRed Hat:enterprise_linux:3::as |
before 1:2002d-12 | 1:2002d-12 |
imap-utilsRed Hat:enterprise_linux:3::as |
before 1:2002d-12 | 1:2002d-12 |
imapRed Hat:enterprise_linux:3::desktop |
before 1:2002d-12 | 1:2002d-12 |
imap-debuginfoRed Hat:enterprise_linux:3::desktop |
before 1:2002d-12 | 1:2002d-12 |
imap-develRed Hat:enterprise_linux:3::desktop |
before 1:2002d-12 | 1:2002d-12 |
imap-utilsRed Hat:enterprise_linux:3::desktop |
before 1:2002d-12 | 1:2002d-12 |
imapRed Hat:enterprise_linux:3::es |
before 1:2002d-12 | 1:2002d-12 |
imap-debuginfoRed Hat:enterprise_linux:3::es |
before 1:2002d-12 | 1:2002d-12 |
imap-develRed Hat:enterprise_linux:3::es |
before 1:2002d-12 | 1:2002d-12 |
imap-utilsRed Hat:enterprise_linux:3::es |
before 1:2002d-12 | 1:2002d-12 |
imapRed Hat:enterprise_linux:3::ws |
before 1:2002d-12 | 1:2002d-12 |
imap-debuginfoRed Hat:enterprise_linux:3::ws |
before 1:2002d-12 | 1:2002d-12 |
imap-develRed Hat:enterprise_linux:3::ws |
before 1:2002d-12 | 1:2002d-12 |
imap-utilsRed Hat:enterprise_linux:3::ws |
before 1:2002d-12 | 1:2002d-12 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-30.ent | 0:4.3.2-30.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.12 | 0:4.3.9-3.12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2933 is a high vulnerability (CVSS 7.5) in University Of Washington Uw-imap, published October 11, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.46%, the 95th percentile. Fixed in uw-imap 7:2002edebian1-12.
References
mandriva.com/security/advisories?name=MDKSA-2005:194
redhat.com/support/errata/RHSA-2005-850.html
secunia.com/advisories/17950
Show 78 moreShow less
support.avaya.com/elmodocs2/security/ASA-2006-160.htm
securityreason.com/securityalert/47
rhn.redhat.com/errata/RHSA-2006-0276.html
debian.org/security/2005/dsa-861
archives.neohapsis.com/archives/fulldisclosure/2005-10/0081.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9858
securityfocus.com/bid/15009
washington.edu/imap
idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true
exchange.xforce.ibmcloud.com/vulnerabilities/22518
securitytracker.com/id?1015000
kb.cert.org/vuls/id/933601
gentoo.org/security/en/glsa/glsa-200510-10.xml
slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.500161
vupen.com/english/advisories/2006/2685
novell.com/linux/security/advisories/2005_23_sr.html
nvd.nist.gov/vuln/detail/CVE-2005-2933
github.com/advisories/GHSA-g3w5-6ccf-62gj
security-tracker.debian.org/tracker/CVE-2005-2933
access.redhat.com/errata/RHSA-2005:848
bugzilla.redhat.com/show_bug.cgi?id=171344
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_848.json
cve.org/CVERecord?id=CVE-2005-2933