PT-2004-3133 · Inter7 · Vpopmail

Published 2004-12-31 · Updated 2024-08-08 · CVE-2004-2238

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions vpopmail version 5.4.2 and earlier

Description The issue in vsybase.c has been observed to use constants that become static format strings when compiled, thus it is not considered a vulnerability. There is no information about the impact or attack vectors of this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-2238

Affected Products

Vpopmail

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2004-2238 · Security Note
• http://osvdb.org/9147 · Patch
• http://securityfocus.com/bid/10962 · Patch
• http://archives.neohapsis.com/archives/bugtraq/2004-08/0264.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-08/0286.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-08/0226.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17017 · Note
• https://t.me/cvenotify/89853 · Telegram Post