7.5
CVSSv2

CVE-2005-0100

Published: 07/02/2005 Updated: 19/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and previous versions, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Vulnerable Product Search on Vulmon Subscribe to Product

gnu emacs 21.3

gnu emacs

gnu xemacs

Vendor Advisories

Max Vozeler discovered a format string vulnerability in the “movemail” utility of Emacs By sending specially crafted packets, a malicious POP3 server could cause a buffer overflow, which could have been exploited to execute arbitrary code with the privileges of the user and the “mail” group (since “movemail” is installed as “setgid m ...
Synopsis emacs security update Type/Severity Security Advisory: Important Topic Updated Emacs packages that fix a string format issue are now available Description Emacs is a powerful, customizable, self-documenting, modeless text editorMax Vozeler discovered several format string vulnera ...
Synopsis xemacs security update Type/Severity Security Advisory: Important Topic Updated XEmacs packages that fix a string format issue are now available forRed Hat Enterprise Linux 4This update has been rated as having important security impact by the RedHat Security Response Team Description ...
Synopsis xemacs security update Type/Severity Security Advisory: Important Topic Updated XEmacs packages that fix a string format issue are now available Description XEmacs is a powerful, customizable, self-documenting, modeless text editorMax Vozeler discovered several format string vuln ...
Synopsis emacs security update Type/Severity Security Advisory: Important Topic Updated Emacs packages that fix a string format issue are now available forRed Hat Enterprise Linux 4This update has been rated as having important security impact by the RedHat Security Response Team Description ...
Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs, the well-known editor Via connecting to a malicious POP server an attacker can execute arbitrary code under the privileges of group mail For the stable distribution (woody) these problems have been fixed in version 207-133 The unstable distribution ( ...
Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs, the well-known editor Via connecting to a malicious POP server an attacker can execute arbitrary code under the privileges of group mail For the stable distribution (woody) these problems have been fixed in version 2146-8woody2 For the unstable distr ...