CVE-2007-5740
NoneCVSS
—
EPSS
12.4%
Published
Oct 31, 2007
CISA due date
—
The record
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | perdition | 0 | 1.17.1-1 |
| Debian:11 | perdition | 0 | 1.17.1-1 |
| Debian:12 | perdition | 0 | 1.17.1-1 |
| Debian:13 | perdition | 0 | 1.17.1-1 |
| Debian:3.1 | perdition | 0 | 1.15-5sarge1 |
| Debian:4.0 | perdition | 0 | 1.17-7etch1 |
| Debian:5.0 | perdition | 0 | 1.17-8+lenny1 |
Related vulnerabilities
- CVE-2026-73782 A format string vulnerability exists in the command line interface of AOS-CX that could… CWE-134
- CVE-2026-16821 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain… CWE-134
- CVE-2026-81574 In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input… CWE-134
- CVE-2026-63073 Issue summary: OpenSSL CMP response validation passed an unexpected response sender… CWE-134
- CVE-2026-17136 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute… CWE-134
- CVE-2026-68553 Coturn is a free open source implementation of TURN and STUN Server. CWE-134
- CVE-2026-15961 IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through… CWE-134
- CVE-2026-12004 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0… CWE-134