CVE

Id
11103  
CVE No.
CVE-2004-2677  
Status
Candidate  
Description
Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.  
Phase
Assigned (20070222)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
78187 11103 CVE-2004-2677 BUGTRAQ:20070218 qwik-smtpd format string  View
78188 11103 CVE-2004-2677 URL:http://www.securityfocus.com/archive/1/archive/1/460600/100/0/threaded  View
78189 11103 CVE-2004-2677 MISC:http://unl0ck.info/advisories/qwik-smtpd.txt  View
78190 11103 CVE-2004-2677 CONFIRM:http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch  View
78191 11103 CVE-2004-2677 BID:11572  View
78192 11103 CVE-2004-2677 URL:http://www.securityfocus.com/bid/11572  View
78193 11103 CVE-2004-2677 VUPEN:ADV-2007-0687  View
78194 11103 CVE-2004-2677 URL:http://www.vupen.com/english/advisories/2007/0687  View
78195 11103 CVE-2004-2677 SECTRACK:1012016  View
78196 11103 CVE-2004-2677 URL:http://securitytracker.com/id?1012016  View
78197 11103 CVE-2004-2677 SECUNIA:13037  View
78198 11103 CVE-2004-2677 URL:http://secunia.com/advisories/13037  View
78199 11103 CVE-2004-2677 XF:qwik-smtpd-format-string(17917)  View

Related JVN