CVE-2005-2661

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.

• http://secunia.com/advisories/17100/Vendor Advisory
• http://secunia.com/advisories/17120
• http://secunia.com/advisories/19113
• http://securityreason.com/securityalert/547
• http://www.debian.org/security/2005/dsa-852Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200603-04.xml
• http://www.securityfocus.com/bid/15048
• http://www.vupen.com/english/advisories/2005/2014
• http://www.vupen.com/english/advisories/2005/2015
• http://secunia.com/advisories/17100/Vendor Advisory
• http://secunia.com/advisories/17120
• http://secunia.com/advisories/19113
• http://securityreason.com/securityalert/547
• http://www.debian.org/security/2005/dsa-852Patch, Vendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200603-04.xml
• http://www.securityfocus.com/bid/15048
• http://www.vupen.com/english/advisories/2005/2014
• http://www.vupen.com/english/advisories/2005/2015

Published

Oct 14, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2655lockmail in maildrop before 1.5.3 does not drop privileges b…
• CVE-2005-2656Polygen before 1.0.6 generates precompiled grammar objects w…
• CVE-2005-2657Unknown vulnerability in common-lisp-controller 4.18 and ear…
• CVE-2005-2658Buffer overflow in utility.cpp in Turquoise SuperStat (turqs…
• CVE-2005-2659Buffer overflow in the LZX decompression in CHM Lib (chmlib)…
• CVE-2005-2660apachetop 0.12.5 and earlier, when running in debug mode, al…
• CVE-2005-2662masqmail before 0.2.18 allows remote attackers to execute ar…
• CVE-2005-2663masqmail before 0.2.18 allows local users to overwrite arbit…
• CVE-2005-2664Whisper 32 1.16, and possibly earlier versions, stores passw…
• CVE-2005-2665Stack-based buffer overflow in expires.c in Elm 2.5 PL5 thro…
• CVE-2005-2666SSH, as implemented in OpenSSH before 4.0 and possibly other…
• CVE-2005-2667Unknown vulnerability in Computer Associates (CA) Message Qu…