4.6
CVSSv2

CVE-2002-1414

Published: 11/04/2003 Updated: 18/10/2016
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable.

Vulnerable Product Search on Vulmon Subscribe to Product

inter7 qmailadmin 1.0.3

inter7 qmailadmin 1.0.4

inter7 qmailadmin 1.0.5

inter7 qmailadmin 1.0

inter7 qmailadmin 1.0.1

inter7 qmailadmin 1.0.2

Exploits

/* source: wwwsecurityfocuscom/bid/5404/info The qmailadmin utility, developed by Inter7, is vulnerable to a buffer overflow condition It is meant to run as a CGI program and is typically installed setuid (owned by root on some systems, regular users on others) qmailadmin fails to implement adequate bounds checking when processing an en ...