CVE-2007-5740
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and...
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
Exploit likelihood
What each source reports
NVD Score used
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
CVE-2007-5740- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
CVE-2007-5740- Updated
- 2026-11-02
EUVDEUVD-2007-5711 No score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
EUVD-2007-5711- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h8w3-m7vj-q5mc No score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and...
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
GHSA-h8w3-m7vj-q5mc- Weakness
- CWE-134
- Updated
- 2026-11-02
OSV No score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
CVE-2007-5740- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5740 No score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
DEBIAN-CVE-2007-5740- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perditionDebian:12 |
before 1.17.1-1 | 1.17.1-1 |
perditionDebian:13 |
before 1.17.1-1 | 1.17.1-1 |
perditionDebian:14 |
before 1.17.1-1 | 1.17.1-1 |
perditionDebian:4.0 |
before 1.17-7etch1, plus listed versions 1.17-7 |
1.17-7etch1 |
perditionDebian:3.1 |
before 1.15-5sarge1, plus listed versions 1.15-5 |
1.15-5sarge1 |
perditionDebian:5.0 |
before 1.17-8+lenny1 | 1.17-8+lenny1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Perdition 1.17 - IMAPD __STR_VWRITE Remote Format String | 2007-10-31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5740 is a high vulnerability (CVSS 7.5) in Vergenet Perdition Mail Retrieval Proxy, published October 31, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.4%, the 96th percentile. Fixed in perdition 1.17.1-1.
References
secunia.com/advisories/27520
securitytracker.com/id?1018883
vergenet.net/linux/perdition/ChangeLog.shtml
sec-consult.com/300.html
archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html
debian.org/security/2007/dsa-1398
Show 8 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/38184
vupen.com/english/advisories/2007/3677
securityfocus.com/archive/1/483034/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2007-5740
github.com/advisories/GHSA-h8w3-m7vj-q5mc
security-tracker.debian.org/tracker/CVE-2007-5740