Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

IA eMailServer can crash from a crafted IMAP LIST request

CVE-2005-2083 · published 21 years ago
Summary

The IA eMailServer Corporate Edition 5.2.2 build 1051 may stop working if it receives a specially formed LIST command over IMAP. This can cause the mail service to shut down, interrupting email access for users. Apply the vendor’s update or patch to prevent the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
truenorth_software ia_emailserver corporate_5.2.2_build_1051
corporate_5.2.3_build_1056
corporate_5.3.1
corporate_5.3.2
corporate_5.3.3
corporate_5.3.4_build_2018
cpe:2.3:a:truenorth_software:ia_emailserver:corporate_5.2.2_build_1051:*:*:*:*:*:*:*
Original advisory text
Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format str...
Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format string specifiers as the second argument.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
3% chance of attack within 30 days
Timeline
Published5 Jul 2005
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2005-2083 · NVD
Track software like this
Free during beta