Search
Find a vulnerability
Search criteria
2 vulnerabilities by postgrey
CVE-2005-1127 (GCVE-0-2005-1127)
Vulnerability from nvd – Published: 2005-04-16 04:00 – Updated: 2024-08-07 21:36
VLAI
EPSS
VEX
Summary
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
16 references
Date Public
2005-04-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:36:00.202Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "GLSA-200608-18",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200608-18.xml"
},
{
"name": "DSA-1122",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2006/dsa-1122"
},
{
"name": "21452",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21452"
},
{
"name": "[postgrey] 20050414 Re: Problem with crashing postgrey",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00630.html"
},
{
"name": "15517",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15517"
},
{
"name": "21164",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21164"
},
{
"name": "20050415 Use of function \"log\" in Perl module Net::Server",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=111354538331167\u0026w=2"
},
{
"name": "21152",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21152"
},
{
"name": "[postgrey] 20050414 Problem with crashing postgrey",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00627.html"
},
{
"name": "21149",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21149"
},
{
"name": "[postgrey] 20050414 ANNOUNCE: Postgrey 1.21 (SECURITY)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00647.html"
},
{
"name": "postgrey-logging-dos(20108)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20108"
},
{
"name": "DSA-1121",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2006/dsa-1121"
},
{
"name": "14958",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/14958"
},
{
"name": "MDKSA-2006:131",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:131"
},
{
"name": "13193",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13193"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "GLSA-200608-18",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200608-18.xml"
},
{
"name": "DSA-1122",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2006/dsa-1122"
},
{
"name": "21452",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21452"
},
{
"name": "[postgrey] 20050414 Re: Problem with crashing postgrey",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00630.html"
},
{
"name": "15517",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15517"
},
{
"name": "21164",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21164"
},
{
"name": "20050415 Use of function \"log\" in Perl module Net::Server",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=111354538331167\u0026w=2"
},
{
"name": "21152",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21152"
},
{
"name": "[postgrey] 20050414 Problem with crashing postgrey",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00627.html"
},
{
"name": "21149",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21149"
},
{
"name": "[postgrey] 20050414 ANNOUNCE: Postgrey 1.21 (SECURITY)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00647.html"
},
{
"name": "postgrey-logging-dos(20108)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20108"
},
{
"name": "DSA-1121",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2006/dsa-1121"
},
{
"name": "14958",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/14958"
},
{
"name": "MDKSA-2006:131",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:131"
},
{
"name": "13193",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13193"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1127",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "GLSA-200608-18",
"refsource": "GENTOO",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200608-18.xml"
},
{
"name": "DSA-1122",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2006/dsa-1122"
},
{
"name": "21452",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21452"
},
{
"name": "[postgrey] 20050414 Re: Problem with crashing postgrey",
"refsource": "MLIST",
"url": "http://lists.ee.ethz.ch/postgrey/msg00630.html"
},
{
"name": "15517",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15517"
},
{
"name": "21164",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21164"
},
{
"name": "20050415 Use of function \"log\" in Perl module Net::Server",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=111354538331167\u0026w=2"
},
{
"name": "21152",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21152"
},
{
"name": "[postgrey] 20050414 Problem with crashing postgrey",
"refsource": "MLIST",
"url": "http://lists.ee.ethz.ch/postgrey/msg00627.html"
},
{
"name": "21149",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21149"
},
{
"name": "[postgrey] 20050414 ANNOUNCE: Postgrey 1.21 (SECURITY)",
"refsource": "MLIST",
"url": "http://lists.ee.ethz.ch/postgrey/msg00647.html"
},
{
"name": "postgrey-logging-dos(20108)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20108"
},
{
"name": "DSA-1121",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2006/dsa-1121"
},
{
"name": "14958",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/14958"
},
{
"name": "MDKSA-2006:131",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:131"
},
{
"name": "13193",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13193"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1127",
"datePublished": "2005-04-16T04:00:00.000Z",
"dateReserved": "2005-04-16T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:36:00.202Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-1127 (GCVE-0-2005-1127)
Vulnerability from cvelistv5 – Published: 2005-04-16 04:00 – Updated: 2024-08-07 21:36
VLAI
EPSS
VEX
Summary
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
16 references
Date Public
2005-04-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T21:36:00.202Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "GLSA-200608-18",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200608-18.xml"
},
{
"name": "DSA-1122",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2006/dsa-1122"
},
{
"name": "21452",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21452"
},
{
"name": "[postgrey] 20050414 Re: Problem with crashing postgrey",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00630.html"
},
{
"name": "15517",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/15517"
},
{
"name": "21164",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21164"
},
{
"name": "20050415 Use of function \"log\" in Perl module Net::Server",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=111354538331167\u0026w=2"
},
{
"name": "21152",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21152"
},
{
"name": "[postgrey] 20050414 Problem with crashing postgrey",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00627.html"
},
{
"name": "21149",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/21149"
},
{
"name": "[postgrey] 20050414 ANNOUNCE: Postgrey 1.21 (SECURITY)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00647.html"
},
{
"name": "postgrey-logging-dos(20108)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20108"
},
{
"name": "DSA-1121",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2006/dsa-1121"
},
{
"name": "14958",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/14958"
},
{
"name": "MDKSA-2006:131",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:131"
},
{
"name": "13193",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/13193"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-04-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-10T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "GLSA-200608-18",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200608-18.xml"
},
{
"name": "DSA-1122",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2006/dsa-1122"
},
{
"name": "21452",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21452"
},
{
"name": "[postgrey] 20050414 Re: Problem with crashing postgrey",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00630.html"
},
{
"name": "15517",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/15517"
},
{
"name": "21164",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21164"
},
{
"name": "20050415 Use of function \"log\" in Perl module Net::Server",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://marc.info/?l=full-disclosure\u0026m=111354538331167\u0026w=2"
},
{
"name": "21152",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21152"
},
{
"name": "[postgrey] 20050414 Problem with crashing postgrey",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00627.html"
},
{
"name": "21149",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/21149"
},
{
"name": "[postgrey] 20050414 ANNOUNCE: Postgrey 1.21 (SECURITY)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.ee.ethz.ch/postgrey/msg00647.html"
},
{
"name": "postgrey-logging-dos(20108)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20108"
},
{
"name": "DSA-1121",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2006/dsa-1121"
},
{
"name": "14958",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/14958"
},
{
"name": "MDKSA-2006:131",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:131"
},
{
"name": "13193",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/13193"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-1127",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "GLSA-200608-18",
"refsource": "GENTOO",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200608-18.xml"
},
{
"name": "DSA-1122",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2006/dsa-1122"
},
{
"name": "21452",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21452"
},
{
"name": "[postgrey] 20050414 Re: Problem with crashing postgrey",
"refsource": "MLIST",
"url": "http://lists.ee.ethz.ch/postgrey/msg00630.html"
},
{
"name": "15517",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/15517"
},
{
"name": "21164",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21164"
},
{
"name": "20050415 Use of function \"log\" in Perl module Net::Server",
"refsource": "FULLDISC",
"url": "http://marc.info/?l=full-disclosure\u0026m=111354538331167\u0026w=2"
},
{
"name": "21152",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21152"
},
{
"name": "[postgrey] 20050414 Problem with crashing postgrey",
"refsource": "MLIST",
"url": "http://lists.ee.ethz.ch/postgrey/msg00627.html"
},
{
"name": "21149",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/21149"
},
{
"name": "[postgrey] 20050414 ANNOUNCE: Postgrey 1.21 (SECURITY)",
"refsource": "MLIST",
"url": "http://lists.ee.ethz.ch/postgrey/msg00647.html"
},
{
"name": "postgrey-logging-dos(20108)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20108"
},
{
"name": "DSA-1121",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2006/dsa-1121"
},
{
"name": "14958",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/14958"
},
{
"name": "MDKSA-2006:131",
"refsource": "MANDRIVA",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:131"
},
{
"name": "13193",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/13193"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-1127",
"datePublished": "2005-04-16T04:00:00.000Z",
"dateReserved": "2005-04-16T00:00:00.000Z",
"dateUpdated": "2024-08-07T21:36:00.202Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}