CVE-2007-2187 Stack-based buffer overflow in eXtremail 2.1.1 and earlier allows remote attackers to execute arbitrary code via a long DNS response. NOTE: this might be related to CVE-2006-6926.
HighCVSS 10.0
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in eXtremail 2.1.1 and earlier allows remote attackers to execute arbitrary code via a long DNS response. NOTE: this might be related to CVE-2006-6926.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| extremail | = 2.1 | No fix listed |
| extremail | = 2.1.1 | No fix listed |
References
- 20070420 eXtremail-v9 exploit mailing-list
- 35583 vdb-entry
- www.digit-labs.org exploit
- 23577 vdb-entry
- 3769 exploit