EUVD-2002-0916

Malware in sbrugna...

CVE-2002-0925

CVE-2002-0925 concerns a format-string vulnerability in the mmsyslog function that allows remote code execution. The vulnerability is triggered via specific commands: (1) USER to mmpop3d for mmmail <= 0.0.13, (2) HELO to mmsmtpd for mmmail <= 0.0.13, or (3) USER to mmftpd

CVE-2002-0925

Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via 1 the USER command to mmpop3d for mmmail 0.0.13 and earlier, 2 the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or 3 the USER command to mmftpd 0.0.7 and earlier...

[CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY ADVISORY INTEXXIAc 04 06 2002 ID 1053-040602 TITLE : mmftpd FTP Daemon Format String Vulnerability CREDITS : Guillaume Pelat / INTEXXIA SYSTEM AFFECTED =============== mmftpd = 0.0.7 DESCRIPTION =========== "mmftpd is a secure FTP server that...

Format string bugs in mmmail/mmftpd

Format string bugs in logging...