CVE-2004-1128 - Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code

CVE-2004-1128

Summary

Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.

References

Vulnerable Configurations

cpe:2.3:a:youngzsoft:cmailserver:5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:youngzsoft:cmailserver:5.2.0:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	11742
bugtraq	20041124 [SIG^2 G-TEC] CMailServer WebMail v5.2 Multiple Vulnerabilities
misc	http://www.security.org.sg/vuln/cmailserver52.html
xf	cmailserver-cmailcomdll-bo(18276)

Last major update

11-07-2017 - 01:30

Published

10-01-2005 - 05:00

Last modified

11-07-2017 - 01:30