{"api_version":"1","generated_at":"2026-07-23T05:44:41+00:00","cve":"CVE-2005-3640","urls":{"html":"https://cve.report/CVE-2005-3640","api":"https://cve.report/api/cve/CVE-2005-3640.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-3640","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-3640"},"summary":{"title":"CVE-2005-3640","description":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-11-16 21:22:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.osvdb.org/20917","name":"http://www.osvdb.org/20917","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/17609","name":"http://secunia.com/advisories/17609","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - FTGate4 Groupware Mail Server Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2005/2478","name":"http://www.vupen.com/english/advisories/2005/2478","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.lucaercoli.it/advs/FTGate4.txt","name":"http://www.lucaercoli.it/advs/FTGate4.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"Luca Ercoli - IT Security Specialist","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html","name":"http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"NEOHAPSIS - Peace of Mind Through Integrity and Insight","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23101","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23101","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/15449","name":"http://www.securityfocus.com/bid/15449","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Floosietek FTGate IMAP Server Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3640","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3640","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"3640","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"floosietek","cpe5":"ftgate","cpe6":"4_4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T23:17:23.900Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ftgate4-groupware-imap-bo(23101)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23101"},{"name":"15449","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15449"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.lucaercoli.it/advs/FTGate4.txt"},{"name":"ADV-2005-2478","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2005/2478"},{"name":"20917","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/20917"},{"name":"20051116 Buffer Overrun in FTGate4 Groupware Mail server","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html"},{"name":"17609","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/17609"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-11-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"ftgate4-groupware-imap-bo(23101)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23101"},{"name":"15449","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15449"},{"tags":["x_refsource_MISC"],"url":"http://www.lucaercoli.it/advs/FTGate4.txt"},{"name":"ADV-2005-2478","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2005/2478"},{"name":"20917","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/20917"},{"name":"20051116 Buffer Overrun in FTGate4 Groupware Mail server","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html"},{"name":"17609","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/17609"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-3640","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ftgate4-groupware-imap-bo(23101)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23101"},{"name":"15449","refsource":"BID","url":"http://www.securityfocus.com/bid/15449"},{"name":"http://www.lucaercoli.it/advs/FTGate4.txt","refsource":"MISC","url":"http://www.lucaercoli.it/advs/FTGate4.txt"},{"name":"ADV-2005-2478","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2005/2478"},{"name":"20917","refsource":"OSVDB","url":"http://www.osvdb.org/20917"},{"name":"20051116 Buffer Overrun in FTGate4 Groupware Mail server","refsource":"BUGTRAQ","url":"http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html"},{"name":"17609","refsource":"SECUNIA","url":"http://secunia.com/advisories/17609"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-3640","datePublished":"2005-11-16T21:17:00.000Z","dateReserved":"2005-11-16T00:00:00.000Z","dateUpdated":"2024-08-07T23:17:23.900Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-11-16 21:22:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:floosietek:ftgate:4_4.1:*:*:*:*:*:*:*","matchCriteriaId":"C9365495-F14E-467F-882B-42231AB02823"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"3640","Ordinal":"1","Title":"CVE-2005-3640","CVE":"CVE-2005-3640","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"3640","Ordinal":"1","NoteData":"Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.","Type":"Description","Title":"CVE-2005-3640"},{"CveYear":"2005","CveId":"3640","Ordinal":"2","NoteData":"2005-11-16","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"3640","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}