CVE-2005-1522
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows...
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
Exploit likelihood
What each source reports
NVD Score used
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
- Record
CVE-2005-1522- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
- Record
CVE-2005-1522- Updated
- 2026-11-02
EUVDEUVD-2005-1525 No score
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
- Record
EUVD-2005-1525- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q5q6-v6qv-64vv No score
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows...
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
- Record
GHSA-q5q6-v6qv-64vv- Updated
- 2026-11-02
OSV No score
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
- Record
CVE-2005-1522- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-1522 No score
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
- Record
DEBIAN-CVE-2005-1522- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mailutilsDebian:12 |
before 1:0.6.1-3 | 1:0.6.1-3 |
mailutilsDebian:13 |
before 1:0.6.1-3 | 1:0.6.1-3 |
mailutilsDebian:14 |
before 1:0.6.1-3 | 1:0.6.1-3 |
mailutilsDebian:3.0 From an advisory covering 4 CVEs |
before 20020409-1woody2, plus listed versions 20020409-120020409-1woody1 |
20020409-1woody2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1522 is a medium vulnerability (CVSS 5.0) in Gnu Mailutils, published May 26, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 76th percentile. Fixed in mailutils 1:0.6.1-3.
References
idefense.com/application/poi/display?id=247&type=vulnerabilities
securitytracker.com/id?1014052
secunia.com/advisories/15442
securityfocus.com/bid/13765
debian.org/security/2005/dsa-732
nvd.nist.gov/vuln/detail/CVE-2005-1522
github.com/advisories/GHSA-q5q6-v6qv-64vv
security-tracker.debian.org/tracker/CVE-2005-1522