PT-2005-1008 · Debian · Smail

Sean · Published 2005-03-28 · Updated 2016-10-18 · CVE-2005-0892

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions smail version 3.2.0.120

Description The issue concerns multiple vulnerabilities in the smail package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A buffer overflow vulnerability in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands.

Recommendations For smail version 3.2.0.120, consider restricting access to the MAIL FROM command and other potentially vulnerable SMTP commands until a patch is available. As a temporary workaround, limiting the length of input strings in these commands may help mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-02014

CVE-2005-0892

DSA-722-1

Affected Products

Smail

References · 8

• 🔥 https://exploit-db.com/exploits/25275 · Exploit
• 🔥 https://exploit-db.com/exploits/900 · Exploit
• https://bdu.fstec.ru/vul/2015-02014 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0892 · Security Note
• http://debian.org/security/2005/dsa-722 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0892 · Security Note
• http://debian.org/security/dsa-722 · Note
• http://marc.info/?l=bugtraq&m=111177045217717&w=2 · Note