CVE-2004-2677

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patchPatch
http://secunia.com/advisories/13037Patch, Vendor Advisory
http://securitytracker.com/id?1012016Patch, Vendor Advisory
http://unl0ck.info/advisories/qwik-smtpd.txt
http://www.securityfocus.com/archive/1/460600/100/0/threaded
http://www.securityfocus.com/bid/11572Exploit, Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/0687
https://exchange.xforce.ibmcloud.com/vulnerabilities/17917
http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patchPatch
http://secunia.com/advisories/13037Patch, Vendor Advisory
http://securitytracker.com/id?1012016Patch, Vendor Advisory
http://unl0ck.info/advisories/qwik-smtpd.txt
http://www.securityfocus.com/archive/1/460600/100/0/threaded
http://www.securityfocus.com/bid/11572Exploit, Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2007/0687
https://exchange.xforce.ibmcloud.com/vulnerabilities/17917

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-26785.1Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) wi CVE-2004-26797.8Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Ex CVE-2004-26805.0mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can c CVE-2004-26817.5PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a CVE-2004-26825.8PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by CVE-2004-26832.1Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows attackers to access arbitrary files on a se CVE-2004-26842.1Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, includin CVE-2004-26857.5Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) com CVE-2004-26867.2Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modul CVE-2004-26879.3distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute a CVE-2004-26884.3Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_CVE-2004-268910.0NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.