Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities by vergenet
CVE-2007-5740 (GCVE-0-2007-5740)
Vulnerability from nvd – Published: 2007-10-31 16:00 – Updated: 2024-08-07 15:39
VLAI
EPSS
VEX
Summary
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/27520 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securitytracker.com/id?1018883 | vdb-entryx_refsource_SECTRACK |
| http://www.vergenet.net/linux/perdition/ChangeLog.shtml | x_refsource_CONFIRM |
| http://www.sec-consult.com/300.html | x_refsource_MISC |
| http://archives.neohapsis.com/archives/fulldisclo… | mailing-listx_refsource_FULLDISC |
| http://www.debian.org/security/2007/dsa-1398 | vendor-advisoryx_refsource_DEBIAN |
| http://secunia.com/advisories/27458 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2007/3677 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/archive/1/483034/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/26270 | vdb-entryx_refsource_BID |
Date Public
2007-10-31 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T15:39:13.796Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "27520",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/27520"
},
{
"name": "1018883",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1018883"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.vergenet.net/linux/perdition/ChangeLog.shtml"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.sec-consult.com/300.html"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html"
},
{
"name": "DSA-1398",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2007/dsa-1398"
},
{
"name": "27458",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/27458"
},
{
"name": "perdition-imap-strvwrite-format-string(38184)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38184"
},
{
"name": "ADV-2007-3677",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/3677"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format StringVulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/483034/100/0/threaded"
},
{
"name": "26270",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26270"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-10-31T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "27520",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/27520"
},
{
"name": "1018883",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1018883"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.vergenet.net/linux/perdition/ChangeLog.shtml"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.sec-consult.com/300.html"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html"
},
{
"name": "DSA-1398",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2007/dsa-1398"
},
{
"name": "27458",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/27458"
},
{
"name": "perdition-imap-strvwrite-format-string(38184)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38184"
},
{
"name": "ADV-2007-3677",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/3677"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format StringVulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/483034/100/0/threaded"
},
{
"name": "26270",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26270"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-5740",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "27520",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27520"
},
{
"name": "1018883",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1018883"
},
{
"name": "http://www.vergenet.net/linux/perdition/ChangeLog.shtml",
"refsource": "CONFIRM",
"url": "http://www.vergenet.net/linux/perdition/ChangeLog.shtml"
},
{
"name": "http://www.sec-consult.com/300.html",
"refsource": "MISC",
"url": "http://www.sec-consult.com/300.html"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability",
"refsource": "FULLDISC",
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html"
},
{
"name": "DSA-1398",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2007/dsa-1398"
},
{
"name": "27458",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27458"
},
{
"name": "perdition-imap-strvwrite-format-string(38184)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38184"
},
{
"name": "ADV-2007-3677",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3677"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format StringVulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/483034/100/0/threaded"
},
{
"name": "26270",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26270"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-5740",
"datePublished": "2007-10-31T16:00:00.000Z",
"dateReserved": "2007-10-31T00:00:00.000Z",
"dateUpdated": "2024-08-07T15:39:13.796Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-5740 (GCVE-0-2007-5740)
Vulnerability from cvelistv5 – Published: 2007-10-31 16:00 – Updated: 2024-08-07 15:39
VLAI
EPSS
VEX
Summary
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
11 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/27520 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securitytracker.com/id?1018883 | vdb-entryx_refsource_SECTRACK |
| http://www.vergenet.net/linux/perdition/ChangeLog.shtml | x_refsource_CONFIRM |
| http://www.sec-consult.com/300.html | x_refsource_MISC |
| http://archives.neohapsis.com/archives/fulldisclo… | mailing-listx_refsource_FULLDISC |
| http://www.debian.org/security/2007/dsa-1398 | vendor-advisoryx_refsource_DEBIAN |
| http://secunia.com/advisories/27458 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.vupen.com/english/advisories/2007/3677 | vdb-entryx_refsource_VUPEN |
| http://www.securityfocus.com/archive/1/483034/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/26270 | vdb-entryx_refsource_BID |
Date Public
2007-10-31 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T15:39:13.796Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "27520",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/27520"
},
{
"name": "1018883",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1018883"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.vergenet.net/linux/perdition/ChangeLog.shtml"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.sec-consult.com/300.html"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html"
},
{
"name": "DSA-1398",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2007/dsa-1398"
},
{
"name": "27458",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/27458"
},
{
"name": "perdition-imap-strvwrite-format-string(38184)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38184"
},
{
"name": "ADV-2007-3677",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/3677"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format StringVulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/483034/100/0/threaded"
},
{
"name": "26270",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26270"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-10-31T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "27520",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/27520"
},
{
"name": "1018883",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1018883"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.vergenet.net/linux/perdition/ChangeLog.shtml"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.sec-consult.com/300.html"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html"
},
{
"name": "DSA-1398",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2007/dsa-1398"
},
{
"name": "27458",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/27458"
},
{
"name": "perdition-imap-strvwrite-format-string(38184)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38184"
},
{
"name": "ADV-2007-3677",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/3677"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format StringVulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/483034/100/0/threaded"
},
{
"name": "26270",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26270"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-5740",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "27520",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27520"
},
{
"name": "1018883",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1018883"
},
{
"name": "http://www.vergenet.net/linux/perdition/ChangeLog.shtml",
"refsource": "CONFIRM",
"url": "http://www.vergenet.net/linux/perdition/ChangeLog.shtml"
},
{
"name": "http://www.sec-consult.com/300.html",
"refsource": "MISC",
"url": "http://www.sec-consult.com/300.html"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability",
"refsource": "FULLDISC",
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0889.html"
},
{
"name": "DSA-1398",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2007/dsa-1398"
},
{
"name": "27458",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/27458"
},
{
"name": "perdition-imap-strvwrite-format-string(38184)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38184"
},
{
"name": "ADV-2007-3677",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/3677"
},
{
"name": "20071031 SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format StringVulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/483034/100/0/threaded"
},
{
"name": "26270",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26270"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-5740",
"datePublished": "2007-10-31T16:00:00.000Z",
"dateReserved": "2007-10-31T00:00:00.000Z",
"dateUpdated": "2024-08-07T15:39:13.796Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}