| Package | Affected versions | Patched versions |
|---|---|---|
| vpopmail vchkpw | = 4.5= 4.7 |
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free