7.5

CVE-2004-2677

Exploit

EPSS 22.38%
Veröffentlicht 31.12.2004 05:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qwikmail ≫ Qwikmail Smtp Version0.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	22.38%	0.957

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch

Patch

http://secunia.com/advisories/13037

Patch

Vendor Advisory

http://securitytracker.com/id?1012016

Patch

Vendor Advisory

http://unl0ck.info/advisories/qwik-smtpd.txt

http://www.securityfocus.com/archive/1/460600/100/0/threaded

http://www.securityfocus.com/bid/11572

Patch

Vendor Advisory

Exploit

http://www.vupen.com/english/advisories/2007/0687

https://exchange.xforce.ibmcloud.com/vulnerabilities/17917

https://nvd.nist.gov/vuln/detail/CVE-2004-2677

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2677

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2677

EUVD