CVE-2005-2409

Published: Aug 1, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers to execute arbitrary code via format string specifiers that are not properly handled in a syslog call.

Affected (1)

Products: Nbsmtp: Nbsmtp

Nbsmtp

1 product

Nbsmtp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nbsmtp Nbsmtp	version ≤ 0.99

References (12)

http://people.freebsd.org/~niels/issues/nbsmtp-20050726.txt

Source: cve@mitre.org

Patch

http://secunia.com/advisories/16279

Source: cve@mitre.org

http://secunia.com/advisories/16324

Source: cve@mitre.org

http://www.securityfocus.com/bid/14441

Source: cve@mitre.org

http://www.vuxml.org/freebsd/debbb39c-fdb3-11d9-a30d-00b0d09acbfc.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/21674

Source: cve@mitre.org

http://people.freebsd.org/~niels/issues/nbsmtp-20050726.txt