Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.
Product
debian/libnet-server-perl vulnerabilities
3 published CVES affecting debian/libnet-server-perl, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 1
- CISA KEV
- 0
Latest debian/libnet-server-perl CVEs
Newest publication first
-
MediumCVSS 4.3 EPSS 1.9%
-
Unknown
-
MediumCVSS 5.0 EPSS 2.7%
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that a...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.