Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for mmmail by matthew_mondor

    CVE-2002-0925 (GCVE-0-2002-0925)

    Vulnerability from nvd – Published: 2002-08-31 04:00 – Updated: 2024-08-08 03:03
    VLAI
    Summary
    Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2386 records in the last 180 days details
    References
    Date Public
    2002-06-12 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:03:49.374Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "mmftpd-mmsyslog-format-string(9337)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/9337.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt"
          },
          {
            "name": "4990",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/4990"
          },
          {
            "name": "mmmail-mmsyslog-format-string(9336)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/9336.php"
          },
          {
            "name": "20020612 [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html"
          },
          {
            "name": "20020612 [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://online.securityfocus.com/archive/1/276523"
          },
          {
            "name": "4999",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/4999"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2002-09-10T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "mmftpd-mmsyslog-format-string(9337)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/9337.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt"
        },
        {
          "name": "4990",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/4990"
        },
        {
          "name": "mmmail-mmsyslog-format-string(9336)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/9336.php"
        },
        {
          "name": "20020612 [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html"
        },
        {
          "name": "20020612 [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://online.securityfocus.com/archive/1/276523"
        },
        {
          "name": "4999",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/4999"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-0925",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "mmftpd-mmsyslog-format-string(9337)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/9337.php"
            },
            {
              "name": "http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt",
              "refsource": "CONFIRM",
              "url": "http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt"
            },
            {
              "name": "4990",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/4990"
            },
            {
              "name": "mmmail-mmsyslog-format-string(9336)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/9336.php"
            },
            {
              "name": "20020612 [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html"
            },
            {
              "name": "20020612 [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://online.securityfocus.com/archive/1/276523"
            },
            {
              "name": "4999",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/4999"
            },
            {
              "name": "http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt",
              "refsource": "CONFIRM",
              "url": "http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-0925",
    "datePublished": "2002-08-31T04:00:00.000Z",
    "dateReserved": "2002-08-16T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:03:49.374Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2002-0925 (GCVE-0-2002-0925)

    Vulnerability from cvelistv5 – Published: 2002-08-31 04:00 – Updated: 2024-08-08 03:03
    VLAI
    Summary
    Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 27/100 over 2386 records in the last 180 days details
    References
    Date Public
    2002-06-12 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:03:49.374Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "mmftpd-mmsyslog-format-string(9337)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/9337.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt"
          },
          {
            "name": "4990",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/4990"
          },
          {
            "name": "mmmail-mmsyslog-format-string(9336)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/9336.php"
          },
          {
            "name": "20020612 [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html"
          },
          {
            "name": "20020612 [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://online.securityfocus.com/archive/1/276523"
          },
          {
            "name": "4999",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/4999"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2002-09-10T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "mmftpd-mmsyslog-format-string(9337)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/9337.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt"
        },
        {
          "name": "4990",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/4990"
        },
        {
          "name": "mmmail-mmsyslog-format-string(9336)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/9336.php"
        },
        {
          "name": "20020612 [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html"
        },
        {
          "name": "20020612 [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://online.securityfocus.com/archive/1/276523"
        },
        {
          "name": "4999",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/4999"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-0925",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "mmftpd-mmsyslog-format-string(9337)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/9337.php"
            },
            {
              "name": "http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt",
              "refsource": "CONFIRM",
              "url": "http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt"
            },
            {
              "name": "4990",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/4990"
            },
            {
              "name": "mmmail-mmsyslog-format-string(9336)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/9336.php"
            },
            {
              "name": "20020612 [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html"
            },
            {
              "name": "20020612 [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://online.securityfocus.com/archive/1/276523"
            },
            {
              "name": "4999",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/4999"
            },
            {
              "name": "http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt",
              "refsource": "CONFIRM",
              "url": "http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-0925",
    "datePublished": "2002-08-31T04:00:00.000Z",
    "dateReserved": "2002-08-16T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:03:49.374Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}