PT-2005-1008 · Debian · Smail

Sean · Publicado 2005-03-28 · Atualizado 2016-10-18 · CVE-2005-0892

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions smail version 3.2.0.120

Description The issue concerns multiple vulnerabilities in the smail package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A buffer overflow vulnerability in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands.

Recommendations For smail version 3.2.0.120, consider restricting access to the MAIL FROM command and other potentially vulnerable SMTP commands until a patch is available. As a temporary workaround, limiting the length of input strings in these commands may help mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

BDU:2015-02014

CVE-2005-0892

DSA-722-1

Produtos afetados

Smail

Referências · 8

• 🔥 https://exploit-db.com/exploits/25275 · Exploit
• 🔥 https://exploit-db.com/exploits/900 · Exploit
• https://bdu.fstec.ru/vul/2015-02014 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0892 · Nota de Segurança
• http://debian.org/security/2005/dsa-722 · Aviso do Fabricante
• http://debian.org/security/dsa-722 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0892 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111177045217717&w=2 · Nota