U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:a:gnu:mailutils:0.5:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 6 matching records.
Displaying matches 1 through 6.
Vuln ID Summary CVSS Severity
CVE-2019-18862

maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode.

Published: November 11, 2019; 11:15:12 AM -0500 		V3.1: 7.8 HIGH
 V2.0: 4.6 MEDIUM
CVE-2005-1520

Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-mail.

Published: May 26, 2005; 12:00:00 AM -0400 		V3.x:(not available)
 V2.0: 7.5 HIGH
CVE-2005-1521

Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow.

Published: May 26, 2005; 12:00:00 AM -0400 		V3.x:(not available)
 V2.0: 7.5 HIGH
CVE-2005-1522

The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.

Published: May 26, 2005; 12:00:00 AM -0400 		V3.x:(not available)
 V2.0: 5.0 MEDIUM
CVE-2005-1523

Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.

Published: May 26, 2005; 12:00:00 AM -0400 		V3.x:(not available)
 V2.0: 7.5 HIGH
CVE-2004-0984

Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.

Published: December 31, 2004; 12:00:00 AM -0500 		V3.x:(not available)
 V2.0: 7.2 HIGH