CVE-2005-2661: Up-Imapproxy

High severity, CVSS 7.5. EPSS: 12.1% chance of exploitation in the next 30 days.

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line.

Affected products

• Up-Imapproxy Up-Imapproxy: version 1.2.3 only; version 1.2.4 only

Published 2005-10-14. Last modified 2026-06-16.