NVD

Id
57531  
Name
CVE-2007-5466  
Description
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-15  
Modified Date
2009-02-05  
Seq
2007-5466  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294348 57531 CVE-2007-5466 http://www.digit-labs.org/files/exploits/extremail-v4.c  View
294349 57531 CVE-2007-5466 http://www.digit-labs.org/files/exploits/extremail-v5.c  View
294350 57531 CVE-2007-5466 http://www.digit-labs.org/files/exploits/extremail-v6.c  View
294351 57531 CVE-2007-5466 http://www.digit-labs.org/files/exploits/extremail-v8.pl  View
294352 57531 CVE-2007-5466 4533  View
294353 57531 CVE-2007-5466 4534  View
294354 57531 CVE-2007-5466 4535  View
294355 57531 CVE-2007-5466 20071015 eXtremail(ly easy) remote roots  View
294356 57531 CVE-2007-5466 26074  View
294357 57531 CVE-2007-5466 extremail-crammd5-bo(37209)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54092 JVNDB-2007-002784 eXtremail におけるバッファオーバーフローの脆弱性 eXtremail には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-5466 28821 CVE-2007-5466 57531 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002784.html 2007-10-15 2012-06-26 View