PT-2008-2066 · Axigen · Axigen Mail Server

Hempel + 1 · Publicado 2008-01-23 · Atualizado 2018-10-15 · CVE-2008-0434

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AXIGEN Mail Server version 5.0.2

Description The issue is related to a format string vulnerability in the AXIMilter module. This vulnerability allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.

Recommendations For AXIGEN Mail Server version 5.0.2, consider disabling the AXIMilter module until a patch is available to prevent potential exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-0434

Produtos afetados

Axigen Mail Server

Referências · 10

• 🔥 http://securityfocus.com/bid/27363 · Exploit
• 🔥 https://exploit-db.com/exploits/4947 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html · Exploit
• http://securityreason.com/securityalert/3570 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0434 · Nota
• http://securityfocus.com/archive/1/486722/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0434 · Nota de Segurança
• http://secunia.com/advisories/28562 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/0237 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39803 · Nota