CVE-2005-0100

EPSS 2.85%
Veröffentlicht 07.02.2005 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 15

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gnu ≫ Emacs Version <= 20.0

Gnu ≫ Emacs Version21.3

Gnu ≫ Xemacs Version <= 21.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.85%	0.849

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://marc.info/?l=bugtraq&m=110780416112719&w=2

http://www.debian.org/security/2005/dsa-670

Patch

Vendor Advisory

http://www.debian.org/security/2005/dsa-671

Patch

Vendor Advisory

http://www.debian.org/security/2005/dsa-685

Patch

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:038

http://www.redhat.com/support/errata/RHSA-2005-110.html

Patch

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-112.html

Patch

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2005-133.html

Patch

Vendor Advisory

http://www.securityfocus.com/archive/1/433928/30/5010/threaded

http://www.securityfocus.com/bid/12462

https://exchange.xforce.ibmcloud.com/vulnerabilities/19246

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408

https://nvd.nist.gov/vuln/detail/CVE-2005-0100

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-0100

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-0100

EUVD