CVE-2005-2409

The vulnerability is in nbSMTP 0.99 and earlier (util.c) where, when in debug mode, format string specifiers are mishandled in a syslog call, allowing remote code execution. Affected product: nbSMTP (nbSMTP). Root cause: improper handling of format strings in a syslog path. Impact: arbitrary code...