Vulnerabilities (CVE)

Filtered by vendor Inter7 Subscribe
Filtered by product Vpopmail Vchkpw
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0583 1 Inter7 1 Vpopmail Vchkpw 2024-02-28 5.0 MEDIUM N/A
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.