NVD

Id
57532  
Name
CVE-2007-5467  
Description
Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long USER command containing "%s" sequences to the pop3 port (110/tcp), which are expanded to "%%s" before being used in the memmove function, possibly due to an incomplete fix for CVE-2001-1078.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-15  
Modified Date
2008-09-05  
Seq
2007-5467  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294358 57532 CVE-2007-5467 http://www.digit-labs.org/files/exploits/extremail-v3.pl  View
294359 57532 CVE-2007-5467 4532  View
294360 57532 CVE-2007-5467 20071015 eXtremail(ly easy) remote roots  View
294361 57532 CVE-2007-5467 26074  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54093 JVNDB-2007-002785 eXtremail における整数オーバーフローの脆弱性 eXtremail は、memmove 関数に使用される前に "%%s" へ拡張するため、整数オーバーフローの脆弱性が存在します。 CVE-2007-5467 28822 CVE-2007-5467 57532 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002785.html 2007-10-15 2012-06-26 View