Description
Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://marc.info/?l=bugtraq&m=94226003804744&w=2
- http://www.securityfocus.com/bid/791Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3488
- http://marc.info/?l=bugtraq&m=94226003804744&w=2
- http://www.securityfocus.com/bid/791Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/3488
Timeline
- Published
- Nov 10, 1999
- Last modified
- Jun 16, 2026
- NVD status
- Modified