Lucene search

K
cve[email protected]CVE-2005-2409
HistoryAug 01, 2005 - 4:00 a.m.

CVE-2005-2409

2005-08-0104:00:00
NVD-CWE-Other
web.nvd.nist.gov
23
cve-2005-2409
format string vulnerability
nbsmtp
remote code execution
nvd

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.133 Low

EPSS

Percentile

95.5%

Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.

CPENameOperatorVersion
nbsmtp:nbsmtpnbsmtple0.99

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.133 Low

EPSS

Percentile

95.5%

Related for CVE-2005-2409