CVE-2005-1127
- State
- Published
- Severity
- Not scored
- Published
- Apr 16, 2005
- Updated
- Aug 7, 2024
- Reserved
- Apr 16, 2005
Description
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- GLSA-200608-18vendor-advisory
- DSA-1122vendor-advisory
- 21452third-party-advisory
- [postgrey] 20050414 Re: Problem with crashing postgreymailing-list
- 15517vdb-entry
- 21164third-party-advisory
- 20050415 Use of function "log" in Perl module Net::Servermailing-list
- 21152third-party-advisory
- [postgrey] 20050414 Problem with crashing postgreymailing-list
- 21149third-party-advisory
- [postgrey] 20050414 ANNOUNCE: Postgrey 1.21 (SECURITY)mailing-list
- postgrey-logging-dos(20108)vdb-entry
- DSA-1121vendor-advisory
- 14958third-party-advisory
- MDKSA-2006:131vendor-advisory
- 13193vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.