Debian Security Advisory DSA 848-1 (masqmail)

The remote host is missing an update to masqmail announced via advisory DSA 848-1. Jens Steube discovered two vulnerabilities in masqmail, a mailer for hosts without permanent internet connection. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2662 Wh...

CVE-2005-2662

Summary (CVE-2005-2662) masqmail prior to 0.2.18 allows a remote attacker to execute arbitrary commands by sending crafted addresses in a failed delivery message. This is caused by improper sanitization during failed-delivery processing. In addition, CVE-2005-2663 involves a privilege-related iss...

CVE-2005-2662

Removed by vendor...