Search
Find a vulnerability
Search criteria
2 vulnerabilities by qwikmail
CVE-2004-2677 (GCVE-0-2004-2677)
Vulnerability from cvelistv5 – Published: 2007-02-22 22:00 – Updated: 2024-08-08 01:36
VLAI
EPSS
VEX
Summary
Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/11572 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1012016 | vdb-entryx_refsource_SECTRACK |
| http://unl0ck.info/advisories/qwik-smtpd.txt | x_refsource_MISC |
| http://secunia.com/advisories/13037 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2007/0687 | vdb-entryx_refsource_VUPEN |
| http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-… | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/460600/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2004-10-30 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:36:25.315Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "11572",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/11572"
},
{
"name": "1012016",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1012016"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://unl0ck.info/advisories/qwik-smtpd.txt"
},
{
"name": "13037",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/13037"
},
{
"name": "qwik-smtpd-format-string(17917)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"
},
{
"name": "ADV-2007-0687",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/0687"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"
},
{
"name": "20070218 qwik-smtpd format string",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-10-30T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "11572",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/11572"
},
{
"name": "1012016",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1012016"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://unl0ck.info/advisories/qwik-smtpd.txt"
},
{
"name": "13037",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/13037"
},
{
"name": "qwik-smtpd-format-string(17917)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"
},
{
"name": "ADV-2007-0687",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/0687"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"
},
{
"name": "20070218 qwik-smtpd format string",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2677",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "11572",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/11572"
},
{
"name": "1012016",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1012016"
},
{
"name": "http://unl0ck.info/advisories/qwik-smtpd.txt",
"refsource": "MISC",
"url": "http://unl0ck.info/advisories/qwik-smtpd.txt"
},
{
"name": "13037",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/13037"
},
{
"name": "qwik-smtpd-format-string(17917)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"
},
{
"name": "ADV-2007-0687",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/0687"
},
{
"name": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch",
"refsource": "CONFIRM",
"url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"
},
{
"name": "20070218 qwik-smtpd format string",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2677",
"datePublished": "2007-02-22T22:00:00.000Z",
"dateReserved": "2007-02-22T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:36:25.315Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2004-2677 (GCVE-0-2004-2677)
Vulnerability from nvd – Published: 2007-02-22 22:00 – Updated: 2024-08-08 01:36
VLAI
EPSS
VEX
Summary
Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/11572 | vdb-entryx_refsource_BID |
| http://securitytracker.com/id?1012016 | vdb-entryx_refsource_SECTRACK |
| http://unl0ck.info/advisories/qwik-smtpd.txt | x_refsource_MISC |
| http://secunia.com/advisories/13037 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2007/0687 | vdb-entryx_refsource_VUPEN |
| http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-… | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/460600/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2004-10-30 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:36:25.315Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "11572",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/11572"
},
{
"name": "1012016",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1012016"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://unl0ck.info/advisories/qwik-smtpd.txt"
},
{
"name": "13037",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/13037"
},
{
"name": "qwik-smtpd-format-string(17917)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"
},
{
"name": "ADV-2007-0687",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/0687"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"
},
{
"name": "20070218 qwik-smtpd format string",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-10-30T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "11572",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/11572"
},
{
"name": "1012016",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1012016"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://unl0ck.info/advisories/qwik-smtpd.txt"
},
{
"name": "13037",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/13037"
},
{
"name": "qwik-smtpd-format-string(17917)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"
},
{
"name": "ADV-2007-0687",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/0687"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"
},
{
"name": "20070218 qwik-smtpd format string",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-2677",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "11572",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/11572"
},
{
"name": "1012016",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1012016"
},
{
"name": "http://unl0ck.info/advisories/qwik-smtpd.txt",
"refsource": "MISC",
"url": "http://unl0ck.info/advisories/qwik-smtpd.txt"
},
{
"name": "13037",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/13037"
},
{
"name": "qwik-smtpd-format-string(17917)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"
},
{
"name": "ADV-2007-0687",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/0687"
},
{
"name": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch",
"refsource": "CONFIRM",
"url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"
},
{
"name": "20070218 qwik-smtpd format string",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-2677",
"datePublished": "2007-02-22T22:00:00.000Z",
"dateReserved": "2007-02-22T00:00:00.000Z",
"dateUpdated": "2024-08-08T01:36:25.315Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}