CVE-2005-2662

2005-09-2119:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

masqmail

vulnerability

remote execution

email security

cve-2005-2662

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.5%

JSON

masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message.

CPENameOperatorVersion
masqmail:masqmailmasqmaileq0.2.9
masqmail:masqmailmasqmaileq0.2.10
masqmail:masqmailmasqmaileq0.0.1
masqmail:masqmailmasqmaileq0.1.5
masqmail:masqmailmasqmaileq0.1.1
masqmail:masqmailmasqmaileq0.0.3
masqmail:masqmailmasqmaileq0.0.13
masqmail:masqmailmasqmaileq0.2.2
masqmail:masqmailmasqmaileq0.2.5
masqmail:masqmailmasqmaileq0.0.4

CPE	Name	Operator	Version
masqmail:masqmail	masqmail	eq	0.2.9
masqmail:masqmail	masqmail	eq	0.2.10
masqmail:masqmail	masqmail	eq	0.0.1
masqmail:masqmail	masqmail	eq	0.1.5
masqmail:masqmail	masqmail	eq	0.1.1
masqmail:masqmail	masqmail	eq	0.0.3
masqmail:masqmail	masqmail	eq	0.0.13
masqmail:masqmail	masqmail	eq	0.2.2
masqmail:masqmail	masqmail	eq	0.2.5
masqmail:masqmail	masqmail	eq	0.0.4