Lucene search
FreeBSD3E3C860D-7DAE-11D9-A9E7-0001020EED82HistoryJan 31, 2005 - 12:00 a.m.
emacs -- movemail format string vulnerability
2005-01-3100:00:00
vuxml.freebsd.org
17
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.007
Percentile
80.4%
Max Vozeler discovered several format string
vulnerabilities in the movemail utility of Emacs. They can
be exploited when connecting to a malicious POP server and
can allow an attacker can execute arbitrary code under the
privileges of the user running Emacs.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | movemail | <= 1.0 | UNKNOWN |
| FreeBSD | any | noarch | zh-emacs | < 20.7_4 | UNKNOWN |
| FreeBSD | any | noarch | emacs | < 20.7_4 | UNKNOWN |
| FreeBSD | any | noarch | xemacs | < 21.4.17 | UNKNOWN |
| FreeBSD | any | noarch | xemacs-mule | < 21.4.17 | UNKNOWN |
| FreeBSD | any | noarch | zh-xemacs | < 21.4.17 | UNKNOWN |
| FreeBSD | any | noarch | zh-xemacs-mule | < 21.4.17 | UNKNOWN |
| FreeBSD | any | noarch | xemacs-devel | < 21.5.b19,1 | UNKNOWN |
| FreeBSD | any | noarch | xemacs-devel-21.5 | = b11 | UNKNOWN |
| FreeBSD | any | noarch | xemacs-devel-mule | < 21.5.b19 | UNKNOWN |
Related
securityvulns
securityvulns
[USN-76-1] Emacs vulnerability
2005-02-10 00:00:00
cvelist
cvelist
CVE-2005-0100
2005-02-08 05:00:00
gentoo
gentoo
Emacs, XEmacs: Format string vulnerabilities in movemail
2005-02-15 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-670-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 671-1 (xemacs21)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-685-1)
2008-01-17 00:00:00
nessus
nessus
RHEL 4 : xemacs (RHSA-2005:133)
2005-02-22 00:00:00
RHEL 2.1 / 3 : emacs (RHSA-2005:112)
2005-02-10 00:00:00
RHEL 4 : emacs (RHSA-2005:110)
2005-02-22 00:00:00
ubuntucve
ubuntucve
CVE-2005-0100
2005-02-07 00:00:00
debiancve
debiancve
CVE-2005-0100
2005-02-08 05:00:00
ubuntu
ubuntu
Emacs vulnerability
2005-02-07 00:00:00
nvd
nvd
CVE-2005-0100
2005-02-07 05:00:00
cve
cve
CVE-2005-0100
2005-02-08 05:00:00
debian
debian
[SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution
2005-02-08 15:04:25
[SECURITY] [DSA 685-1] New emacs21 packages fix arbitrary code execution
2005-02-17 11:33:38
[SECURITY] [DSA 670-1] New emacs20 packages fix arbitrary code execution
2005-02-08 09:10:48
osv
osv
emacs20 - format string
2005-02-08 00:00:00
emacs21 - format string
2005-02-17 00:00:00
xemacs21 - format string
2005-02-08 00:00:00
redhat
redhat
(RHSA-2005:112) emacs security update
2005-02-10 00:00:00
(RHSA-2005:110) emacs security update
2005-02-15 00:00:00
(RHSA-2005:134) xemacs security update
2005-02-10 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.007
Percentile
80.4%
Related for 3E3C860D-7DAE-11D9-A9E7-0001020EED82