| Package | Affected versions | Patched versions |
|---|---|---|
| perdition mail retrieval proxy | ≤ 1.17 |
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free