CVE-2008-0434 Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.
HighCVSS 9.3
EPSS 10.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gecad technologies axigen mail server | = 5.0.2 | No fix listed |
References
- 20080120 AXIGEN 5.0.x AXIMilter Format String Exploit exploit mailing-list
- 28562 third-party-advisory vendor-advisory
- 3570 third-party-advisory
- 20080120 AXIGEN 5.0.x AXIMilter Format String Exploit mailing-list
- 27363 exploit vdb-entry
- ADV-2008-0237 vdb-entry
- axigen-aximilter-format-string(39803) vdb-entry
- 4947 exploit