{"id":"CVE-2005-3640","aliases":["EUVD-2005-3637","GHSA-qwf2-wg38-rvpm"],"status":"published","title":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1...","description":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.08811,"percentile":0.95217,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2005-11-16T21:17:00Z","modified":"2026-06-16T22:17:19Z","exploits":[{"source":"exploitdb","id":"EDB-1327","title":"FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow (PoC)","type":"dos","platform":"windows","date":"2005-11-16","verified":true,"url":"https://www.exploit-db.com/exploits/1327"}],"products":[{"vendor":"floosietek","product":"ftgate"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23101","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/15449","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.lucaercoli.it/advs/FTGate4.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/2478","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.osvdb.org/20917","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/17609","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3640"},{"url":"https://github.com/advisories/GHSA-qwf2-wg38-rvpm"}],"sources":{"cve":[{"id":"CVE-2005-3640","description":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.","status":"published","published":"2005-11-16T21:17:00Z","modified":"2024-08-07T23:17:23.9Z","updated_at":"2026-11-02T14:33:38.906611Z"}],"euvd":[{"id":"EUVD-2005-3637","description":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.","status":"published","published":"2005-11-16T21:17:00Z","modified":"2024-08-07T23:17:23Z","updated_at":"2026-11-03T01:15:26.279574Z"}],"ghsa":[{"id":"GHSA-qwf2-wg38-rvpm","title":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1...","description":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.","status":"published","published":"2022-05-01T02:19:41Z","modified":"2023-01-30T05:08:09Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:47:48.188889Z"}],"nvd":[{"id":"CVE-2005-3640","description":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.","status":"published","published":"2005-11-16T21:22:00Z","modified":"2026-06-16T22:17:19.057Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:00:57.365803Z"}]}}