Vulnerability CVE-2005-0100
Published: 2005-02-07   Modified: 2012-02-12

Description:
Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
GNU -> Emacs 
GNU -> Xemacs 

 References:
http://marc.info/?l=bugtraq&m=110780416112719&w=2
http://www.debian.org/security/2005/dsa-670
http://www.debian.org/security/2005/dsa-671
http://www.debian.org/security/2005/dsa-685
http://www.mandriva.com/security/advisories?name=MDKSA-2005:038
http://www.redhat.com/support/errata/RHSA-2005-110.html
http://www.redhat.com/support/errata/RHSA-2005-112.html
http://www.redhat.com/support/errata/RHSA-2005-133.html
http://www.securityfocus.com/archive/1/433928/30/5010/threaded
http://www.securityfocus.com/bid/12462
https://exchange.xforce.ibmcloud.com/vulnerabilities/19246
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408
Copyright 2024, cxsecurity.com

 

Back to Top