CVE

Id
5314  
CVE No.
CVE-2002-0925  
Status
Candidate  
Description
Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier.  
Phase
Proposed (20020830)  
Votes
ACCEPT(4) Baker, Cole, Frech, Green | NOOP(3) Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28490 5314 CVE-2002-0925 BUGTRAQ:20020612 [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability  View
28491 5314 CVE-2002-0925 URL:http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html  View
28492 5314 CVE-2002-0925 BUGTRAQ:20020612 [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability  View
28493 5314 CVE-2002-0925 URL:http://online.securityfocus.com/archive/1/276523  View
28494 5314 CVE-2002-0925 CONFIRM:http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt  View
28495 5314 CVE-2002-0925 CONFIRM:http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt  View
28496 5314 CVE-2002-0925 BID:4990  View
28497 5314 CVE-2002-0925 URL:http://www.securityfocus.com/bid/4990  View
28498 5314 CVE-2002-0925 XF:mmmail-mmsyslog-format-string(9336)  View
28499 5314 CVE-2002-0925 URL:http://www.iss.net/security_center/static/9336.php  View
28500 5314 CVE-2002-0925 BID:4999  View
28501 5314 CVE-2002-0925 URL:http://www.securityfocus.com/bid/4999  View
28502 5314 CVE-2002-0925 XF:mmftpd-mmsyslog-format-string(9337)  View

Related JVN