summaryrefslogtreecommitdiffstats
path: root/data/DTSA/advs/20-mailutils.adv
blob: 81ae0df37e78a700b2e52c829308dd7deb8b83ce (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
source: mailutils
date: October 4th, 2005
author: Neil Mcgovern
vuln-type: Format string vulnerability
problem-scope: remote
debian-specifc: no
cve: CAN-2005-2878
vendor-advisory: http://savannah.gnu.org/patch/index.php?func=detailitem&item_id=4407
testing-fix: 1:0.6.90-2.1etch1
sid-fix: 1:0.6.90-3
upgrade: apt-get update

A format string vulnerability has been discovered in Mailutils.

CAN-2005-2878
  A format string vulnerability in search.c in the imap4d server in GNU
  Mailutils 0.6 allows remote authenticated users to execute arbitrary code via
  format string specifiers in the SEARCH command.

© 2014-2024 Faster IT GmbH | imprint | privacy policy