CVE-2008-0434

Published: Jan 23, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.

Affected (1)

Products: Gecad Technologies: Axigen Mail Server

Gecad Technologies

1 product

Axigen Mail Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gecad Technologies Axigen Mail Server	Version 5.0.2

Related CWEs

CWE-189

References (16)

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/28562

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/3570

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/486722/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27363

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2008/0237

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39803

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4947

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html