CVE-2007-2187

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2007-04/0569.html · Exploit
• osvdb.org/35583
• digit-labs.org/files/exploits/extremail-v9.c · Exploit
• securityfocus.com/bid/23577
• exploit-db.com/exploits/3769

extremail のその他の脆弱性

• CVE-2007-5467緊急 10.0Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, v…
• CVE-2007-5466緊急 10.0Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strin…
• CVE-2007-2188緊急 10.0eXtremail 2.1.1 and earlier does not verify the ID field (aka transaction id) in DNS responses, which makes it easier for remote attackers t…
• CVE-2006-6926緊急 10.0Buffer overflow in eXtremail 2.1 has unknown impact and attack vectors, as demonstrated by VulnDisco Pack. NOTE: The provenance of this inf…
• CVE-2004-0332緊急 10.0Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain pri…