Back to Database
Status published
High
CVE-2005-2665
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through...
Vulnerability Description
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2665
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.419306
- http://secunia.com/advisories/16508
- http://securitytracker.com/id?1014745
- http://www.redhat.com/support/errata/RHSA-2005-755.html
- http://www.gentoo.org/security/en/glsa/glsa-200510-15.xml
- http://marc.info/?l=bugtraq&m=112472951529964&w=2
- http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:186
- http://www.securityfocus.com/advisories/9670
- http://www.securityfocus.com/bid/15117
- http://secunia.com/advisories/17475
- http://secunia.com/advisories/16554
- http://www.securityfocus.com/bid/14613
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056
More from elm development group
View All →CVE-2003-1323
Elm ME+ 2.4 before PL109S, when installed setgid mail and...
Medium
6.8
CVE-2003-0966
Buffer overflow in the frm command in elm 2.5.6 and...
High
7.5
CVE-2001-1174
Buffer overflow in Elm 2.5.5 and earlier allows remote attackers...
High
7.5
CVE-1999-1334
Multiple buffer overflows in filter command in Elm 2.4 allows...
High
7.5
CVE-1999-1184
Buffer overflow in Elm 2.4 and earlier allows local users...
Medium
4.6
Affected Vendor
elm development group
View all reports →Affected Software
elm
Vulnerable Versions:
2.5_pl5, 2.5_pl6, 2.5_pl7
Timeline
Official Publish:
August 23rd, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.