CVE-2000-0583

vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:inter7:vpopmail_vchkpw:4.5:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail_vchkpw:4.7:*:*:*:*:*:*:*

History

20 Nov 2024, 23:32

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/1418 - () http://www.securityfocus.com/bid/1418 -
References () http://www.securityfocus.com/templates/archive.pike?list=1&msg=395BD2A8.5D3396A7%40secureaustin.com - () http://www.securityfocus.com/templates/archive.pike?list=1&msg=395BD2A8.5D3396A7%40secureaustin.com -
References () http://www.vpopmail.cx/vpopmail-ChangeLog - URL Repurposed () http://www.vpopmail.cx/vpopmail-ChangeLog - URL Repurposed

14 Feb 2024, 01:17

Type Values Removed Values Added
References (CONFIRM) http://www.vpopmail.cx/vpopmail-ChangeLog - (CONFIRM) http://www.vpopmail.cx/vpopmail-ChangeLog - URL Repurposed

07 Nov 2023, 01:55

Type Values Removed Values Added
References
  • {'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=395BD2A8.5D3396A7@secureaustin.com', 'name': '20000626 vpopmail-3.4.11 problems', 'tags': ['Vendor Advisory'], 'refsource': 'BUGTRAQ'}
  • () http://www.securityfocus.com/templates/archive.pike?list=1&msg=395BD2A8.5D3396A7%40secureaustin.com -

Information

Published : 2000-06-30 04:00

Updated : 2024-11-20 23:32


NVD link : CVE-2000-0583

Mitre link : CVE-2000-0583

CVE.ORG link : CVE-2000-0583


JSON object : View

Products Affected

inter7

  • vpopmail_vchkpw