1. CVE-Search
  2. CVE-2005-4445
ID CVE-2005-4445
Summary Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via a long email message header, which triggers a one-byte buffer overflow.
References
Vulnerable Configurations
  • cpe:2.3:a:david_harris:pegasus_mail:4.21a:*:*:*:*:*:*:*
    cpe:2.3:a:david_harris:pegasus_mail:4.21a:*:*:*:*:*:*:*
  • cpe:2.3:a:david_harris:pegasus_mail:4.21b:*:*:*:*:*:*:*
    cpe:2.3:a:david_harris:pegasus_mail:4.21b:*:*:*:*:*:*:*
  • cpe:2.3:a:david_harris:pegasus_mail:4.21c:*:*:*:*:*:*:*
    cpe:2.3:a:david_harris:pegasus_mail:4.21c:*:*:*:*:*:*:*
  • cpe:2.3:a:david_harris:pegasus_mail:4.30pb1:*:*:*:*:*:*:*
    cpe:2.3:a:david_harris:pegasus_mail:4.30pb1:*:*:*:*:*:*:*
CVSS
Base: 5.1 (as of 19-10-2018 - 15:40)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:H/Au:N/C:P/I:P/A:P
refmap via4
bid 15973
bugtraq 20051220 Secunia Research: Pegasus Mail Buffer Overflow and Off-by-OneVulnerabilities
confirm http://www.pmail.com/newsflash.htm#secunia
misc http://secunia.com/secunia_research/2005-61/advisory/
osvdb 21843
sectrack 1015385
secunia 17992
Last major update 19-10-2018 - 15:40
Published 21-12-2005 - 02:03
Last modified 19-10-2018 - 15:40
Back to Top