Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0893
smail
smail 3.2.0.120
modes.c
signal handler
arbitrary code execution
cve-2005-0893
nvd
7.7 High
AI Score
Confidence
Low
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
38.4%
modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.
| CPE | Name | Operator | Version |
|---|---|---|---|
| smail:smail | smail | eq | 3.2.0.120 |
Related
ubuntucve
ubuntucve
CVE-2005-0893
2005-05-02 00:00:00
nessus
nessus
Smail-3 < 3.2.0.121 Multiple Vulnerabilities
2005-03-25 00:00:00
Debian DSA-722-1 : smail - buffer overflow
2005-05-11 00:00:00
7.7 High
AI Score
Confidence
Low
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
38.4%
Related for CVE-2005-0893