Lucene search

K
freebsdFreeBSD6C2D4F29-AF3E-11D9-837D-000E0C2E438A
HistoryApr 12, 2005 - 12:00 a.m.

gld -- format string and buffer overflow vulnerabilities

2005-04-1200:00:00
vuxml.freebsd.org
20

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.745 High

EPSS

Percentile

98.1%

Gld has been found vulnerable to multiple buffer overflows as
well as multiple format string vulnerabilities.

An attacker could exploit this vulnerability to execute
arbitrary code with the permissions of the user running Gld,
the default user being root.

The FreeBSD port defaults to running gld as the root user.
The risk of exploitation can be minimized by making gld
listen on the loopback address only, or configure it to only
accept connections from trusted smtp servers.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgld< 1.5UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.745 High

EPSS

Percentile

98.1%

Related for 6C2D4F29-AF3E-11D9-837D-000E0C2E438A