CVE-2004-2417

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) client hostname or (2) message-id, which are injected into a syslog message.

Affected (1)

Products: Smtp.proxy: Smtp.proxy

Smtp.proxy

1 product

Smtp.proxy

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Smtp.proxy Smtp.proxy	Version 1.1.3

References (10)

http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0267.html

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/11823

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/6838

Source: cve@mitre.org

http://www.securityfocus.com/bid/10509

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16378

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0267.html