Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.56019
Category:Gentoo Local Security Checks
Title:Gentoo Security Advisory GLSA 200512-05 (xmail)
Summary:The remote host is missing updates announced in;advisory GLSA 200512-05.
Description:Summary:
The remote host is missing updates announced in
advisory GLSA 200512-05.

Vulnerability Insight:
The sendmail program in Xmail is vulnerable to a buffer overflow,
potentially resulting in local privilege escalation.

Solution:
All Xmail users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=mail-mta/xmail-1.22'

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2005-2943
BugTraq ID: 15103
http://www.securityfocus.com/bid/15103
Debian Security Information: DSA-902 (Google Search)
http://www.debian.org/security/2005/dsa-902
http://www.gentoo.org/security/en/glsa/glsa-200512-05.xml
http://www.idefense.com/application/poi/display?id=321&type=vulnerabilities
http://www.osvdb.org/20010
http://securitytracker.com/id?1015055
http://secunia.com/advisories/17194
http://secunia.com/advisories/17637
http://secunia.com/advisories/18052
http://securityreason.com/securityalert/81
XForce ISS Database: xmail-addressfromatptr-bo(22724)
https://exchange.xforce.ibmcloud.com/vulnerabilities/22724
CopyrightCopyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.