CVE-2005-2409

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.9%

from disclosure to weapon4 days

Published on NVDAug 1

1st PoC+4d

exploitation probability

9.9%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1138

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://people.freebsd.org/~niels/issues/nbsmtp-20050726.txt http://secunia.com/advisories/16279 http://secunia.com/advisories/16324 https://exchange.xforce.ibmcloud.com/vulnerabilities/21674 http://www.securityfocus.com/bid/14441 http://www.vuxml.org/freebsd/debbb39c-fdb3-11d9-a30d-00b0d09acbfc.html