CVE-2005-2665

Elm contains a stack-based buffer overflow in expires.c that affects Elm 2.5 PL5–PL7 (and possibly other versions). A crafted email with a long Expires header can allow a remote attacker to execute arbitrary code with the user’s privileges. Public advisories (RHSA-2005:755, CESA-2005:755) note a ...

CVE-1999-1184

CVE-1999-1184 describes a buffer overflow in Elm 2.4 and earlier, allowing local users to gain privileges via a long TERM environment variable. Affected: Elm 2.4 and earlier. Impact per CVSS: partial confidentiality, integrity and availability with local, low complexity, no authentication require...

CVE-2003-0966

CVE-2003-0966 affects the Elm mail user agent’s frm command. A buffer overflow in the frm command allows a remote attacker to cause arbitrary code execution by sending a message with an excessively long Subject line, affecting Elm versions 2.5.6 and earlier (potentially later). The issue is docum...

CVE-1999-0114

CVE-1999-0114 (Elm 2.4 mail package) : The Elm mail package (elm-2.4) is affected via the filter command, where a symlink attack lets local users execute commands as other users and read other users’ files. Root cause is a directory/file permission/symlink handling flaw in the filter command. Imp...

CVE-1999-1334

CVE-1999-1334 : Multiple buffer overflows in the filter command of Elm 2.4 allow an attacker to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) a long -f (filterfile) command line argument. The connected sources confirm Elm 2.4 as the affected component a...

CVE-2001-1174

The CVE-2001-1174 issue affects the Elm email client (Elm 2.5.5 and earlier). The root cause is a buffer overflow when handling very long Message-ID headers, allowing remote attackers to potentially execute arbitrary code. Mandrake/MKSA advisory MDKSA-2001:067 notes that the overflow could overwr...

CVE-2003-1323

Elm ME+ 2.4 before PL109S is affected. When installed with setgid mail and on systems lacking POSIX saved ID support, local users can read and modify certain files with the privileges of the mail group via unspecified vectors. The Red Hat advisory corroborates the version and condition but does n...