CVE-2007-2187

Description

References

• archives.neohapsis.com/archives/fulldisclosure/2007-04/0569.html · Exploit
• osvdb.org/35583
• digit-labs.org/files/exploits/extremail-v9.c · Exploit
• securityfocus.com/bid/23577
• exploit-db.com/exploits/3769

extremail 的其他漏洞

• CVE-2007-5467严重 10.0Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, v…
• CVE-2007-5466严重 10.0Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strin…
• CVE-2007-2188严重 10.0eXtremail 2.1.1 and earlier does not verify the ID field (aka transaction id) in DNS responses, which makes it easier for remote attackers t…
• CVE-2006-6926严重 10.0Buffer overflow in eXtremail 2.1 has unknown impact and attack vectors, as demonstrated by VulnDisco Pack. NOTE: The provenance of this inf…
• CVE-2004-0332严重 10.0Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain pri…