CVE-2000-0583 vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PA...
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inter7 vpopmail vchkpw | = 4.5 | No fix listed |
| inter7 vpopmail vchkpw | = 4.7 | No fix listed |
References
- 1418 vdb-entry
- 20000626 vpopmail-3.4.11 problems mailing-list
- www.vpopmail.cx url-repurposed