Lucene search

K
cve[email protected]CVE-2005-3182
HistoryOct 20, 2005 - 10:02 a.m.

CVE-2005-3182

2005-10-2010:02:00
web.nvd.nist.gov
26
cve-2005-3182
buffer overflow
gfi mailsecurity
remote code execution
http management interface
nvd
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.161 Low

EPSS

Percentile

96.0%

Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests. NOTE: the vendor suggests that this issues is “in an underlying Microsoft technology” which, if true, could mean that the overflow affects other products as well.

Affected configurations

NVD
Node
gfimailsecurityMatch8.1exchange_smtp
CPENameOperatorVersion
gfi:mailsecuritygfi mailsecurityeq8.1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.161 Low

EPSS

Percentile

96.0%

Related for CVE-2005-3182