PT-2005-4397 · Ftgate · Ftgate4

Luca Ercoli · Published 2005-11-16 · Updated 2017-07-11 · CVE-2005-3640

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FTGate4 version 4.1

Description The issue concerns multiple buffer overflows in the IMAP Groupware Mail server of FTGate4. Remote attackers can execute arbitrary code by providing long arguments to various IMAP commands. This has been demonstrated using the EXAMINE command.

Recommendations For FTGate4 version 4.1, update to a version that addresses the buffer overflow issues in the IMAP Groupware Mail server to prevent remote code execution.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2005-3640

Affected Products

Ftgate4

References · 9

• 🔥 https://exploit-db.com/exploits/1327 · Exploit
• 🔥 http://lucaercoli.it/advs/FTGate4.txt · Exploit
• 🔥 http://securityfocus.com/bid/15449 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3640 · Security Note
• http://secunia.com/advisories/17609 · Vendor Advisory
• http://vupen.com/english/advisories/2005/2478 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23101 · Note
• http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html · Note
• http://osvdb.org/20917 · Note