CVE-2008-5005

Name	CVE-2008-5005
Description	Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-1685-1, DTSA-174-1, DTSA-174-2

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
alpine (PTS)	jessie, jessie (lts)	2.11+dfsg1-3+deb8u1	fixed
	stretch	2.20+dfsg1-7	fixed
	buster	2.21+dfsg1-1.1	fixed
	bullseye	2.24+dfsg1-1	fixed
	sid, trixie, bookworm	2.26+dfsg-1	fixed
uw-imap (PTS)	jessie, jessie (lts)	8:2007f~dfsg-4+deb8u1	fixed
	stretch (security), stretch (lts), stretch	8:2007f~dfsg-5+deb9u1	fixed
	buster	8:2007f~dfsg-6	fixed
	sid, trixie, bullseye, bookworm	8:2007f~dfsg-7	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
alpine	source	(unstable)	(not affected)
uw-imap	source	etch	7:2002edebian1-13.1+etch1	DSA-1685-1
uw-imap	source	lenny	2007b~dfsg-4+lenny3	DTSA-174-2
uw-imap	source	(unstable)	7:2007d~dfsg-1

- alpine <not-affected> (vulnerable code present but tmail/dmail wont be installed)