CVE-2001-1078 | BDVDB-2026-3252 Detail

Description#

Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, and the POP3 commands (5) USER and (6) other commands that can be executed after POP3 authentication.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/2908
http://archives.neohapsis.com/archives/bugtraq/2001-06/0291.html
http://www.extremail.com/news.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/6733
http://www.extremail.com/history.htm

Exploit#

No public exploit known

History#

Version 12002-02-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.