CVE-2002-2198 Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname.
HighCVSS 10.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zmailer | = 2.99.45 | No fix listed |
| zmailer | = 2.99.46 | No fix listed |
| zmailer | = 2.99.47 | No fix listed |
| zmailer | = 2.99.48 | No fix listed |
| zmailer | = 2.99.49 | No fix listed |
| zmailer | = 2.99.50 | No fix listed |
| zmailer | = 2.99.51 | No fix listed |
References
- zmailer-ipv6-helo-bo(10013) patch vdb-entry
- 5592 patch vdb-entry