Security Advisory

CVE-2005-1127

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-04-16 04:00:00

Last updated 2024-08-07 21:36:00

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.

← Browse all CVEs View on cve.org ↗