CVE-2007-5740

published 2007-10-31

CVE-2007-5740: The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an…

Priority P3 54 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	perdition	< perdition 1.17.1-1 (bookworm)	perdition 1.17.1-1 (bookworm)
perdition	perdition	>= 0 < 1.17.1-1	1.17.1-1
perdition	perdition	>= 0 < 1.17.1-1	1.17.1-1
perdition	perdition	>= 0 < 1.17.1-1	1.17.1-1
perdition	perdition	>= 0 < 1.17.1-1	1.17.1-1
vergenet	perdition_mail_retrieval_proxy	<= 1.17	—

CVSS provenance

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

osv 7.5 HIGH

vendor_debian 7.5 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-134