high7.5Public exploit code
CVE-2005-2409
Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format str…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- nbSMTP 0.99 - 'util.c' Client-Side Command Execution2005-08-05 · remote · linux · Verified
Impact
Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nbsmtp | Nbsmtp | through 0.99 |
References
- NVD record
- CVE.org record
- http://people.freebsd.org/~niels/issues/nbsmtp-20050726.txt
- http://secunia.com/advisories/16279
- http://secunia.com/advisories/16324
- http://www.securityfocus.com/bid/14441
- http://www.vuxml.org/freebsd/debbb39c-fdb3-11d9-a30d-00b0d09acbfc.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21674
- http://people.freebsd.org/~niels/issues/nbsmtp-20050726.txt
- http://secunia.com/advisories/16279
- http://secunia.com/advisories/16324
- http://www.securityfocus.com/bid/14441
- http://www.vuxml.org/freebsd/debbb39c-fdb3-11d9-a30d-00b0d09acbfc.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21674