CVE-2005-4267

Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7) SELECT, and (8) COPY commands.

• CWE-119

• http://seclists.org/lists/fulldisclosure/2005/Dec/1037.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17640Vendor Advisory
• http://securityreason.com/securityalert/277
• http://securitytracker.com/id?1015391
• http://www.idefense.com/intelligence/vulnerabilities/display.php?id=359Vendor Advisory
• http://www.securityfocus.com/bid/15980Exploit
• http://www.vupen.com/english/advisories/2005/3005Vendor Advisory
• http://seclists.org/lists/fulldisclosure/2005/Dec/1037.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17640Vendor Advisory
• http://securityreason.com/securityalert/277
• http://securitytracker.com/id?1015391
• http://www.idefense.com/intelligence/vulnerabilities/display.php?id=359Vendor Advisory
• http://www.securityfocus.com/bid/15980Exploit
• http://www.vupen.com/english/advisories/2005/3005Vendor Advisory

Published

Dec 21, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4261Unspecified vulnerability in Positive Software Corporation C…
• CVE-2005-4262Cross-site scripting (XSS) vulnerability in the News module …
• CVE-2005-4263SQL injection vulnerability in the News module in Envolution…
• CVE-2005-4264Multiple SQL injection vulnerabilities in index.php in PHP S…
• CVE-2005-4265Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-4266WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trust…
• CVE-2005-4268Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when …
• CVE-2005-4269mshtml.dll in Microsoft Windows XP, Server 2003, and Interne…
• CVE-2005-4270Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 …
• CVE-2005-4271Buffer overflow in the malloc debug system in IBM AIX 5.3 al…
• CVE-2005-4272Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow…
• CVE-2005-4273Multiple unspecified vulnerabilities in (1) getShell and (2)…