GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2005-2943

Vulnerability from fkie_nvd - Published: 2005-10-13 22:02 - Updated: 2026-06-16 22:15
Severity
Summary
Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option.
References
cve@mitre.orghttp://secunia.com/advisories/17194
cve@mitre.orghttp://secunia.com/advisories/17637
cve@mitre.orghttp://secunia.com/advisories/18052
cve@mitre.orghttp://securityreason.com/securityalert/81
cve@mitre.orghttp://securitytracker.com/id?1015055
cve@mitre.orghttp://www.debian.org/security/2005/dsa-902
cve@mitre.orghttp://www.gentoo.org/security/en/glsa/glsa-200512-05.xml
cve@mitre.orghttp://www.idefense.com/application/poi/display?id=321&type=vulnerabilitiesPatch, Vendor Advisory
cve@mitre.orghttp://www.osvdb.org/20010
cve@mitre.orghttp://www.securityfocus.com/bid/15103
cve@mitre.orghttp://www.xmailserver.org/ChangeLog.html#oct_12__2005_v_1_22
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/22724
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/17194
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/17637
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/18052
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/81
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015055
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2005/dsa-902
af854a3a-2127-422b-91ae-364da2661108http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml
af854a3a-2127-422b-91ae-364da2661108http://www.idefense.com/application/poi/display?id=321&type=vulnerabilitiesPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/20010
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/15103
af854a3a-2127-422b-91ae-364da2661108http://www.xmailserver.org/ChangeLog.html#oct_12__2005_v_1_22
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/22724
Impacted products
Vendor Product Version
davide_libenzi xmail 1.0
davide_libenzi xmail 1.1
davide_libenzi xmail 1.2
davide_libenzi xmail 1.3
davide_libenzi xmail 1.4
davide_libenzi xmail 1.5
davide_libenzi xmail 1.6
davide_libenzi xmail 1.7
davide_libenzi xmail 1.8
davide_libenzi xmail 1.9
davide_libenzi xmail 1.10
davide_libenzi xmail 1.11
davide_libenzi xmail 1.12
davide_libenzi xmail 1.14
davide_libenzi xmail 1.15
davide_libenzi xmail 1.16
davide_libenzi xmail 1.17
davide_libenzi xmail 1.18
davide_libenzi xmail 1.19
davide_libenzi xmail 1.20
davide_libenzi xmail 1.21
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B86CC05D-62C9-4F9B-AFA8-C0CF8C00DEF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "918A0DB1-2FE6-4FC1-B957-3FFE60263A76",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C99D1C6-E73D-4FAD-872C-FB7CD5CBE48D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "90EC3FFB-812A-4440-BEFB-4D2B67AC37AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "F12CBC28-D23A-483B-829A-B11423D9F18F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C259E51-4DF4-4D0C-9AB4-F3840DA75D28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "39668C04-DFAA-4152-9A8D-74C900C96FF6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1A7B9A4-B6A4-457C-AB14-22E900D85163",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "C81EF987-4610-4F52-9B7D-02ABC6E85B1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB98F9FF-49A7-433F-8CA2-D842E10D3201",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "65EFD68C-A7E9-4371-AB84-CB08973E2659",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "B119C7BC-038E-458F-8C54-6B0C83EF6B1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "1597610A-0824-4CC7-B969-08ADA89B7476",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "9CB7001A-D790-4995-92CD-45E1CA8E6EE8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF1E0252-304E-4835-9614-EFE1A58E9BB6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "824D8F15-E510-414E-A08B-C6141E0D0506",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5B8987C-A1E3-4F86-8264-5C23F182BF40",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA54C747-8E09-4E41-9CE6-F5F7E83F49FC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F6F7FBA-9809-4D36-9173-987B801F9774",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "08D694FB-3E98-46F0-8096-479206CDF8FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:davide_libenzi:xmail:1.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "86BB0A56-D579-45ED-8D16-03670BB53E54",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option."
    }
  ],
  "id": "CVE-2005-2943",
  "lastModified": "2026-06-16T22:15:56.697",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-10-13T22:02:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/17194"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/17637"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/18052"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/81"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015055"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2005/dsa-902"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/application/poi/display?id=321\u0026type=vulnerabilities"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/20010"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/15103"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.xmailserver.org/ChangeLog.html#oct_12__2005_v_1_22"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22724"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17194"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17637"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18052"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/81"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015055"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2005/dsa-902"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/application/poi/display?id=321\u0026type=vulnerabilities"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/20010"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/15103"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.xmailserver.org/ChangeLog.html#oct_12__2005_v_1_22"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22724"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.