CVE-2005-3640

CVE-2005-3640 describes multiple buffer overflow vulnerabilities in the IMAP Groupware Mail server component of Floosietek FTGate (FTGate4) version 4.1. Remote attackers can exploit these flaws by sending excessively long arguments to various IMAP commands, such as EXAMINE, to execute arbitrary code. This vulnerability carries a critical CVSS score of 10.0, indicating a network-based attack with low complexity, requiring no authentication, and leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.