CVE-2004-1113

Опубликовано: 10 янв. 2005

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) sender or (2) recipient e-mail addresses.

Ссылки

http://secunia.com/advisories/13135/
http://sourceforge.net/project/shownotes.php?release_id=281256
http://www.securityfocus.com/bid/11633
Patch
Vendor Advisory
http://www.trustix.org/errata/2004/0058/
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17998
http://secunia.com/advisories/13135/
http://sourceforge.net/project/shownotes.php?release_id=281256
http://www.securityfocus.com/bid/11633
Patch
Vendor Advisory
http://www.trustix.org/errata/2004/0058/
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17998

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sqlgrey:sqlgrey_postfix_greylisting_service:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:sqlgrey:sqlgrey_postfix_greylisting_service:1.1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00528

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-1113

debian

больше 20 лет назад

SQL injection vulnerability in SQLgrey Postfix greylisting service bef ...

GHSA-7j6j-h8m2-f7qv

github

больше 3 лет назад