← back
CVE-2005-2409

CVE-2005-2409

EPSS 9.9%
Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/1138unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://people.freebsd.org/~niels/issues/nbsmtp-20050726.txthttp://secunia.com/advisories/16279http://secunia.com/advisories/16324https://exchange.xforce.ibmcloud.com/vulnerabilities/21674http://www.securityfocus.com/bid/14441http://www.vuxml.org/freebsd/debbb39c-fdb3-11d9-a30d-00b0d09acbfc.html