CVE-2008-0434

Опубликовано: 23 янв. 2008

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.

Ссылки

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html
Exploit
http://secunia.com/advisories/28562
Vendor Advisory
http://securityreason.com/securityalert/3570
http://www.securityfocus.com/archive/1/486722/100/0/threaded
http://www.securityfocus.com/bid/27363
Exploit
http://www.vupen.com/english/advisories/2008/0237
https://exchange.xforce.ibmcloud.com/vulnerabilities/39803
https://www.exploit-db.com/exploits/4947
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html
Exploit
http://secunia.com/advisories/28562
Vendor Advisory
http://securityreason.com/securityalert/3570
http://www.securityfocus.com/archive/1/486722/100/0/threaded
http://www.securityfocus.com/bid/27363
Exploit
http://www.vupen.com/english/advisories/2008/0237
https://exchange.xforce.ibmcloud.com/vulnerabilities/39803
https://www.exploit-db.com/exploits/4947

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gecad_technologies:axigen_mail_server:5.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.10354

Средний

9.3 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

GHSA-52qg-8f5r-jg8w

github

больше 4 лет назад