CVE-2005-3182: Buffer Overflow
First published: Thu Oct 20 2005(Updated: )
Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests. NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could mean that the overflow affects other products as well.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GFI MailSecurity | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://kbase.gfi.com/showarticle.asp?id=KBID002451
- http://www.securityfocus.com/bid/15081
- http://secunia.com/advisories/17136/
- http://securitytracker.com/id?1015046
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0290.html
- http://www.osvdb.org/19926
- http://securityreason.com/securityalert/74
- http://marc.info/?l=bugtraq&m=112914475508191&w=2
Frequently Asked Questions
What is the severity of CVE-2005-3182?
CVE-2005-3182 is classified as a high severity vulnerability due to potential remote code execution risks.
How do I fix CVE-2005-3182?
To remediate CVE-2005-3182, upgrade to the latest version of GFI MailSecurity that addresses this buffer overflow vulnerability.
What are the affected systems for CVE-2005-3182?
CVE-2005-3182 specifically affects GFI MailSecurity version 8.1 running with Exchange SMTP.
What kind of attack vectors are associated with CVE-2005-3182?
CVE-2005-3182 can be exploited via HTTP requests containing maliciously crafted long headers.
Are there any known exploits for CVE-2005-3182?
Yes, there are known exploit techniques that leverage the buffer overflow in CVE-2005-3182 to execute arbitrary code remotely.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/remedy
- agent/weakness
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/gfi
- canonical/gfi mailsecurity
- version/gfi mailsecurity/8.1