7.7 High
AI Score
Confidence
High
0.046 Low
EPSS
Percentile
92.6%
Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) client hostname or (2) message-id, which are injected into a syslog message.
archives.neohapsis.com/archives/fulldisclosure/2004-06/0267.html
secunia.com/advisories/11823
www.osvdb.org/6838
www.securityfocus.com/bid/10509
exchange.xforce.ibmcloud.com/vulnerabilities/16378