CVE-2005-0804 - Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (

CVE-2005-0804

Summary

Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mailto field.

References

http://marc.info/?l=bugtraq&m=111108519331738&w=2
http://secunia.com/advisories/14627
http://www.securityfocus.com/bid/12833

Vulnerable Configurations

cpe:2.3:a:mailenable:mailenable_standard:1.8:*:*:*:*:*:*:*
cpe:2.3:a:mailenable:mailenable_standard:1.8:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 18-10-2016 - 03:14)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bid	12833
bugtraq	20050317 See-security Advisory: Format string vulnerability in MailEnable 1.8
secunia	14627

Last major update

18-10-2016 - 03:14

Published

02-05-2005 - 04:00

Last modified

18-10-2016 - 03:14