CVE-2007-5466

N/A Unknown
Published: October 15, 2007 Modified: April 23, 2026
View on NVD

Description

Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/27220
Source: cve@mitre.org
Vendor Advisory
http://www.digit-labs.org/files/exploits/extremail-v4.c
Source: cve@mitre.org
http://www.digit-labs.org/files/exploits/extremail-v5.c
Source: cve@mitre.org
http://www.digit-labs.org/files/exploits/extremail-v6.c
Source: cve@mitre.org
http://www.digit-labs.org/files/exploits/extremail-v8.pl
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/482293
Source: cve@mitre.org
http://www.securityfocus.com/bid/26074
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/37209
Source: cve@mitre.org
https://www.exploit-db.com/exploits/4533
Source: cve@mitre.org
https://www.exploit-db.com/exploits/4534
Source: cve@mitre.org
https://www.exploit-db.com/exploits/4535
Source: cve@mitre.org
http://secunia.com/advisories/27220
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.digit-labs.org/files/exploits/extremail-v4.c
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.digit-labs.org/files/exploits/extremail-v5.c
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.digit-labs.org/files/exploits/extremail-v6.c
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.digit-labs.org/files/exploits/extremail-v8.pl
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/482293
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/26074
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/37209
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.exploit-db.com/exploits/4533
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.exploit-db.com/exploits/4534
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.exploit-db.com/exploits/4535
Source: af854a3a-2127-422b-91ae-364da2661108

22 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
19.9%
97th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-119

Affected Vendors

extremail

Related CVEs

CVE-2026-9699 6.8
CVE-2026-57667 8.5
CVE-2026-57665 5.3
CVE-2026-57664 4.3
CVE-2026-57663 8.5