CVE-2004-2677

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-8q7c-xwf8-vm5r

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows...

References (16)

• http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch Patch
• http://secunia.com/advisories/13037 Patch, Vendor Advisory
• http://securitytracker.com/id?1012016 Patch, Vendor Advisory
• http://unl0ck.info/advisories/qwik-smtpd.txt
• http://www.securityfocus.com/archive/1/460600/100/0/threaded
• http://www.securityfocus.com/bid/11572 Exploit, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0687
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17917
• http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch Patch
• http://secunia.com/advisories/13037 Patch, Vendor Advisory
• http://securitytracker.com/id?1012016 Patch, Vendor Advisory
• http://unl0ck.info/advisories/qwik-smtpd.txt
• http://www.securityfocus.com/archive/1/460600/100/0/threaded
• http://www.securityfocus.com/bid/11572 Exploit, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0687