Published: 21/06/2001 Updated: 19/12/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Format string vulnerability in flog function of eXtremail 1.1.9 and previous versions allows remote malicious users to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, and the POP3 commands (5) USER and (6) other commands that can be executed after POP3 authentication.

Vulnerable Product	Search on Vulmon	Subscribe to Product
extremail extremail 1.0.1
extremail extremail 1.0
extremail extremail 1.1.3
extremail extremail 1.1.4
extremail extremail 1.0.3
extremail extremail 1.1
extremail extremail 1.1.7
extremail extremail 1.1.8
extremail extremail 1.0.2
extremail extremail 1.1.5
extremail extremail 1.1.6
extremail extremail 1.1.1
extremail extremail 1.1.2
extremail extremail 1.1.9

source: wwwsecurityfocuscom/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX eXtremail contains a format-string vulnerability in its logging mechanism Attackers can send SMTP commands argumented with maliciously constructed arguments that will exploit this vulnerability eXtremail runs with root priv ...

source: wwwsecurityfocuscom/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX eXtremail contains a format-string vulnerability in its logging mechanism Attackers can send SMTP commands argumented with maliciously constructed arguments that will exploit this vulnerability eXtremail runs with root privileges ...

source: wwwsecurityfocuscom/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX eXtremail contains a format-string vulnerability in its logging mechanism Attackers can send SMTP commands argumented with maliciously constructed arguments that will exploit this vulnerability eXtremail runs with root privile ...

/****************************************************************/ /* Linux eXtremail 15x Remote Format Strings Exploit */ /* */ /* */ /* By B-r00t - 02/07/2003 */ /* */ /* Versions: Lin ...

NVD-CWE-Other http://www.securityfocus.com/bid/2908 http://www.extremail.com/history.htm http://www.extremail.com/news.htm http://archives.neohapsis.com/archives/bugtraq/2001-06/0291.html https://exchange.xforce.ibmcloud.com/vulnerabilities/6733 https://nvd.nist.gov https://www.exploit-db.com/exploits/20954/

CVE-2001-1078

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect