CVE-2005-2665
published 2005-08-23CVE-2005-2665: Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an…
PriorityP346high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
15.26%
96.4th percentile
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| elm_development_group | elm | — | — |
| elm_development_group | elm | — | — |
| elm_development_group | elm | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2005-08-20·CVSS 7.5
CVE-2005-2665 [HIGH] security flaw
security flaw
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.
GHSA
GHSA-5mm7-3qq4-v6fr: Stack-based buffer overflow in expires
ghsa_unreviewed·2022-05-01
CVE-2005-2665 [HIGH] GHSA-5mm7-3qq4-v6fr: Stack-based buffer overflow in expires
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.
No detection rules found.
http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.htmlhttp://marc.info/?l=bugtraq&m=112472951529964&w=2http://secunia.com/advisories/16508http://secunia.com/advisories/16554http://secunia.com/advisories/17475http://securitytracker.com/id?1014745http://www.gentoo.org/security/en/glsa/glsa-200510-15.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:186http://www.redhat.com/support/errata/RHSA-2005-755.htmlhttp://www.securityfocus.com/advisories/9670http://www.securityfocus.com/bid/14613http://www.securityfocus.com/bid/15117http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.419306http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.htmlhttp://marc.info/?l=bugtraq&m=112472951529964&w=2http://secunia.com/advisories/16508http://secunia.com/advisories/16554http://secunia.com/advisories/17475http://securitytracker.com/id?1014745http://www.gentoo.org/security/en/glsa/glsa-200510-15.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:186http://www.redhat.com/support/errata/RHSA-2005-755.htmlhttp://www.securityfocus.com/advisories/9670http://www.securityfocus.com/bid/14613http://www.securityfocus.com/bid/15117http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.419306http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056
2005-08-23
Published