CVE-2005-1099 Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary cod...
HighCVSS 10.0
EPSS 67.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a network interface, allow remote attackers to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| salim gasmi gld | = 1.0 | No fix listed |
| salim gasmi gld | = 1.1 | No fix listed |
| salim gasmi gld | = 1.2 | No fix listed |
| salim gasmi gld | = 1.3 | No fix listed |
| salim gasmi gld | = 1.3.1 | No fix listed |
| salim gasmi gld | = 1.4 | No fix listed |
| debian/postfix-gld(Debian:12) | < 1.5-1 | 1.5-1 |
| debian/postfix-gld(Debian:13) | < 1.5-1 | 1.5-1 |
| debian/postfix-gld(Debian:14) | < 1.5-1 | 1.5-1 |
References
- Debian Security Tracker CVE-2005-1099 vendor-advisory
- 20050412 GLD (Greylisting daemon for Postfix) multiple vulnerabilities. mailing-list
- 20050413 Gld 1.5 released (security fix) mailing-list
- 14941 patch third-party-advisory vendor-advisory
- GLSA-200504-10 patch vendor-advisory
- 1013678 vdb-entry vendor-advisory
- www.gasmi.net vendor-advisory
- 15492 patch vdb-entry vendor-advisory
- gld-serverc-bo(20066) vdb-entry