PT-2005-2774 · Php · Phpmailer

Mariano Nuñez Di Croce · Publicado 2005-05-28 · Atualizado 2011-03-08 · CVE-2005-1807

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHPMailer versions 1.7.2 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop that consumes memory and CPU. This is achieved by exploiting the Data function in the class.smtp.php file.

Recommendations For PHPMailer versions 1.7.2 and earlier, update to a version later than 1.7.2 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-1807

Produtos afetados

Phpmailer

Referências · 15

• 🔥 https://exploit-db.com/exploits/25752 · Exploit
• 🔥 http://securitytracker.com/id?1014069 · Exploit
• 🔥 http://cybsec.com/vuln/PHPMailer-DOS.pdf · Exploit
• http://secunia.com/advisories/18732 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=341210&group_id=26031 · Nota
• http://secunia.com/advisories/25726 · Nota
• https://osv.dev/vulnerability/CVE-2005-1807 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0448 · Nota
• http://vupen.com/english/advisories/2007/2242 · Nota
• http://securityfocus.com/bid/13805 · Nota
• https://security-tracker.debian.org/tracker/CVE-2005-1807 · Aviso do Fabricante
• http://seclists.org/lists/bugtraq/2005/May/0337.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1807 · Nota de Segurança
• http://secunia.com/advisories/15543 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1807 · Aviso do Fabricante