CVE-2005-2943

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-29444.6The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbitCVE-2005-29452.1arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from fiCVE-2005-29467.5The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithmCVE-2005-29475.1Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDesCVE-2005-29482.1KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which areCVE-2005-29497.5pam_per_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which CVE-2005-29504.3Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via CVE-2005-29517.5Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to exeCVE-2005-29525.0Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a ..CVE-2005-29534.3Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML vCVE-2005-29547.5SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands viCVE-2005-29554.6config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which al
CVE-2005-2943: High severity, CVSS 7.5 | Vulnix