EUVD-2004-1189

Malware in sbrugna...

CVE-2004-1192: Undefined Security Weakness

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server...

CVE-2002-0432: Undefined Security Weakness

Buffer overflow in 1 lprintf and 2 cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server...