Executive Summary

Informations
Name CVE-2005-2943 First vendor Publication 2005-10-13
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score 7.5 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2943

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 21

OpenVAS Exploits

Date Description
2008-09-24 Name : Gentoo Security Advisory GLSA 200512-05 (xmail)
File : nvt/glsa_200512_05.nasl
2008-01-17 Name : Debian Security Advisory DSA 902-1 (xmail)
File : nvt/deb_902_1.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
20010 XMail -t Argument Command Line Local Overflow

A local overflow exists in XMail. The 'AddressFromAtPtr()' function fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request containing an overly long string to the -t argument, a malicious user can cause arbitrary code execution resulting in a loss of integrity.

Nessus® Vulnerability Scanner

Date Description
2006-10-14 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-902.nasl - Type : ACT_GATHER_INFO
2005-12-15 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200512-05.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://secunia.com/advisories/17194
http://secunia.com/advisories/17637
http://secunia.com/advisories/18052
http://securityreason.com/securityalert/81
http://securitytracker.com/id?1015055
http://www.debian.org/security/2005/dsa-902
http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml
http://www.idefense.com/application/poi/display?id=321&type=vulnerabilities
http://www.osvdb.org/20010
http://www.securityfocus.com/bid/15103
http://www.xmailserver.org/ChangeLog.html#oct_12__2005_v_1_22
https://exchange.xforce.ibmcloud.com/vulnerabilities/22724
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2024-11-28 23:21:49
  • Multiple Updates
2024-11-28 12:07:25
  • Multiple Updates
2021-05-04 12:03:10
  • Multiple Updates
2021-04-22 01:03:27
  • Multiple Updates
2020-05-23 00:16:49
  • Multiple Updates
2017-07-11 12:02:00
  • Multiple Updates
2016-06-28 15:21:33
  • Multiple Updates
2016-04-26 13:48:30
  • Multiple Updates
2014-02-17 10:32:53
  • Multiple Updates
2013-05-11 11:31:33
  • Multiple Updates