Beveiligingsadvies

CVE-2005-1127

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-04-16 04:00:00
Laatst bijgewerkt 2024-08-07 21:36:00
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.