First published: Fri Feb 25 2005(Updated: )
bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Debian Bsmtpd | <=2.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0107 is considered to be a critical vulnerability due to its potential to allow remote command execution.
To fix CVE-2005-0107, upgrade to a version of bsmtpd later than 2.3 that properly sanitizes email addresses.
CVE-2005-0107 affects bsmtpd versions 2.3 and earlier.
Yes, CVE-2005-0107 can be exploited remotely, allowing attackers to execute arbitrary commands.
Exploitation of CVE-2005-0107 can lead to full system compromise and unauthorized access to sensitive information.