CVE-2005-3640

CRITICAL 10.0CVE-2005-3640 · Published 16/11/2005 · updated 16/06/2026

In short

CVE-2005-3640 is a CRITICAL (CVSS 10.0) vulnerability affecting ftgate (floosietek).
Chance of exploitation in the next 30 days (EPSS): 8.8%, higher than 95.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ftgate floosietek	`= 4_4.1`	No fix yet

Description

Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.

References

archives.neohapsis.com/archives/bugtraq/2005-11/0213.html
secunia.com/advisories/17609 · Vendor Advisory
lucaercoli.it/advs/FTGate4.txt · Exploit
osvdb.org/20917
securityfocus.com/bid/15449 · Exploit
vupen.com/english/advisories/2005/2478 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/23101

More vulnerabilities in ftgate

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free