CVE-2007-5740
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and...
CVE-2007-5740 is a high vulnerability (CVSS 7.5) in Vergenet Perdition Mail Retrieval Proxy, published October 31, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.4%, the 96th percentile. Fixed in perdition 1.17.1-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 12.4%EPSS, 96th percentile
- Exploitation
- None known1 public exploit
- Fixed in
1.17.1-1perdition +5 more
Description
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perditionDebian:12 | before 1.17.1-1 | 1.17.1-1 |
perditionDebian:13 | before 1.17.1-1 | 1.17.1-1 |
perditionDebian:14 | before 1.17.1-1 | 1.17.1-1 |
perditionDebian:4.0 | before 1.17-7etch1, plus listed versions 1.17-7 | 1.17-7etch1 |
perditionDebian:3.1 | before 1.15-5sarge1, plus listed versions 1.15-5 | 1.15-5sarge1 |
perditionDebian:5.0 | before 1.17-8+lenny1 | 1.17-8+lenny1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Perdition 1.17 - IMAPD __STR_VWRITE Remote Format String | 2007-10-31 |
What each source reports
NVD Score used
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
CVE-2007-5740- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE ListNo score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
CVE-2007-5740- Updated
- 2026-11-02
EUVDEUVD-2007-5711No score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
EUVD-2007-5711- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h8w3-m7vj-q5mcNo score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and...
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
GHSA-h8w3-m7vj-q5mc- Weakness
- CWE-134
- Updated
- 2026-11-02
OSVNo score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
CVE-2007-5740- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5740No score
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
- Record
DEBIAN-CVE-2007-5740- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/27520
securitytracker.com/id?1018883
vergenet.net/linux/perdition/ChangeLog.shtml
sec-consult.com/300.html
archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html
debian.org/security/2007/dsa-1398
Show 8 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/38184
vupen.com/english/advisories/2007/3677
securityfocus.com/archive/1/483034/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2007-5740
github.com/advisories/GHSA-h8w3-m7vj-q5mc
security-tracker.debian.org/tracker/CVE-2007-5740