CVE-1999-0920: University Of Washington Imap

High severity, CVSS 10.0. EPSS: 32.4% chance of exploitation in the next 30 days.

Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.

Affected products

• University Of Washington Imap: version 4.4 only
• University Of Washington POP2D: any version

Published 1999-05-26. Last modified 2026-06-16.