CVE-2007-5740
Publication date 31 October 2007
Last updated 24 July 2024
Ubuntu priority
Description
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.