CVE-2007-5740 The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a for...
HighCVSS 7.5
EPSS 12.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vergenet perdition mail retrieval proxy | <= 1.17 | No fix listed |
| debian/perdition(Debian:12) | < 1.17.1-1 | 1.17.1-1 |
| debian/perdition(Debian:13) | < 1.17.1-1 | 1.17.1-1 |
| debian/perdition(Debian:14) | < 1.17.1-1 | 1.17.1-1 |
References
- Debian Security Tracker CVE-2007-5740 vendor-advisory
- bugs.debian.org issue-tracking
- 20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability mailing-list patch
- 27458 third-party-advisory vendor-advisory
- 27520 third-party-advisory vendor-advisory
- DSA-1398 vendor-advisory
- www.sec-consult.com
- 20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format StringVulnerability mailing-list
- 26270 vdb-entry
- 1018883 vdb-entry
- www.vergenet.net
- ADV-2007-3677 vdb-entry
- perdition-imap-strvwrite-format-string(38184) vdb-entry