Published: 13/10/2005 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in sendmail in XMail prior to 1.22 allows remote malicious users to execute arbitrary code via a long -t command line option.

Vulnerable Product	Search on Vulmon	Subscribe to Product
davide libenzi xmail 1.16
davide libenzi xmail 1.17
davide libenzi xmail 1.4
davide libenzi xmail 1.5
davide libenzi xmail 1.11
davide libenzi xmail 1.12
davide libenzi xmail 1.2
davide libenzi xmail 1.20
davide libenzi xmail 1.8
davide libenzi xmail 1.9
davide libenzi xmail 1.14
davide libenzi xmail 1.15
davide libenzi xmail 1.21
davide libenzi xmail 1.3
davide libenzi xmail 1.0
davide libenzi xmail 1.1
davide libenzi xmail 1.10
davide libenzi xmail 1.18
davide libenzi xmail 1.19
davide libenzi xmail 1.6
davide libenzi xmail 1.7

/* * XMail 121 'sendmail' local exploit (ret-into-libc) * Yields uid root || gid mail * By qaaz [at] centrum [dot] cz, 2005 */ #include <stdioh> #include <stdlibh> #include <unistdh> #include <stringh> #include <signalh> #include <sys/typesh> #include <sys/waith> #include <sys/selecth> #def ...

NVD-CWE-Other http://www.idefense.com/application/poi/display?id=321&type=vulnerabilities http://www.xmailserver.org/ChangeLog.html#oct_12__2005_v_1_22 http://www.debian.org/security/2005/dsa-902 http://www.securityfocus.com/bid/15103 http://secunia.com/advisories/17637 http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml http://secunia.com/advisories/18052 http://securitytracker.com/id?1015055 http://secunia.com/advisories/17194 http://www.osvdb.org/20010 http://securityreason.com/securityalert/81 https://exchange.xforce.ibmcloud.com/vulnerabilities/22724 https://nvd.nist.gov https://www.exploit-db.com/exploits/1267/

CVE-2005-2943

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect