Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, and the POP3 commands (5) USER and (6) other commands that can be executed after POP3 authentication.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:36
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2001-06/0291.html - | |
References | () http://www.extremail.com/history.htm - | |
References | () http://www.extremail.com/news.htm - | |
References | () http://www.securityfocus.com/bid/2908 - Exploit, Patch, Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/6733 - |
Information
Published : 2001-06-21 04:00
Updated : 2024-11-20 23:36
NVD link : CVE-2001-1078
Mitre link : CVE-2001-1078
CVE.ORG link : CVE-2001-1078
JSON object : View
Products Affected
extremail
- extremail
CWE