CVE-2002-1279 - Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow

CVE-2002-1279

Summary

Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file (-C option).

References

http://lists.masqmail.cx/pipermail/masqmail/2002-November/000040.html
http://lists.masqmail.cx/pipermail/masqmail/2002-November/000041.html
http://www.debian.org/security/2002/dsa-194
http://www.iss.net/security_center/static/10605.php
http://www.securityfocus.com/bid/6164

Vulnerable Configurations

cpe:2.3:a:masqmail:masqmail:0.1.16:*:*:*:*:*:*:*
cpe:2.3:a:masqmail:masqmail:0.1.16:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 10-09-2008 - 19:14)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	6164
confirm	http://lists.masqmail.cx/pipermail/masqmail/2002-November/000040.html http://lists.masqmail.cx/pipermail/masqmail/2002-November/000041.html
debian	DSA-194
xf	masqmail-bo(10605)

Last major update

10-09-2008 - 19:14

Published

29-11-2002 - 05:00

Last modified

10-09-2008 - 19:14