rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-2864 
URBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1) high score or (2) save game files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2865 
Multiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to execute arbitrary PHP code via the config[root_dir] parameter to (1) mysql.inc.php, (2) efsnet.inc.php, (3) theinternetcommerce.inc.php, (4) cdg.inc.php, (5) compuworld.inc.php, (6) directone.inc.php, (7) authorize_aim.inc.php, (8) beanstream.inc.php, (9) config.inc.php, (10) eprocessingnetwork.inc.php, (11) eway.inc.php, (12) linkpoint.inc.php, (13) logiccommerce.inc.php, (14) netbilling.inc.php, (15) payflow_pro.inc.php, (16) paymentsgateway.inc.php, (17) payos.inc.php, (18) payready.inc.php, or (19) plugnplay.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2866 
Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2867 
SQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL commands via the Account ID field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2868 
ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain sensitive information such as proxy server information and passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2869 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the Username to libraries/auth/cookie.auth.lib.php or (2) the error parameter to error.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2870 
Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DHCP responses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-08T04:00:00.000Z
CVE-2005-2871 
Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a hostname with all "soft" hyphens (character 0xAD), which is not properly handled by the NormalizeIDN call in nsStandardURL::BuildNormalizedSpec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-09T04:00:00.000Z
CVE-2005-2872 
The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length based on the u_int32_t type, acting on an array of unsigned long elements, a different vulnerability than CVE-2005-2873.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-09T04:00:00.000Z
CVE-2005-2873 
The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-09T04:00:00.000Z
CVE-2005-2874 
The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cause a denial of service (CPU consumption by tight loop) via a "..\.." URL in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-13T04:00:00.000Z
CVE-2005-2875 
Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-13T04:00:00.000Z
CVE-2005-2876 
umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-13T04:00:00.000Z
CVE-2005-2877 
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-16T04:00:00.000Z
CVE-2005-2878 
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-13T04:00:00.000Z
CVE-2005-2879 
Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2880 
Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (2) LocationID parameter to week.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2881 
phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct request to the admin directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2882 
Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the LocationID parameter to (1) thankyou.php or (2) day.php, font parameter to (3) calDaily.php, (4) calMonthly.php, (5) calMonthlyP.php, (6) calWeekly.php, (7) calWeeklyP.php, (8) calYearly.php, (9) calYearlyP.php, (10) day.php, or (11) week.php, or (12) CeTi, (13) Contact, (14) Description, (15) ShowAddress parameter to event.php, and other attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2884 
Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2885 
The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could allow remote attackers to bypass file extension checks and execute arbitrary commands by uploading a file with a different extension, as demonstrated using .inc files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2886 
Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via (1) the print parameter to the print module, the sitename parameter to (2) bb_smilies or (3) bbcode_ref module, or (4) the hlpfile parameter to openwindow.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2887 
MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) wiki.php, (2) AutoTheme directory, (3) Blocks directory, (4) admin.php, (5) pnadmin.php, or (6) Topics directory, which reveal the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2888 
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Disposition field in the HTTP header to newreply.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2889 
Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intended restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2890 
SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass intended restrictions and gain access to the secured environment via direct access to the PhysicalMemory device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2891 
WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the (1) MakeArchive or (2) MakeArchiveStr methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2892 
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) in the u parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2893 
Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2894 
Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2895 
setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information via a %00 (a null byte) in the u parameter, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2896 
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_userpw parameter to startup.php, (2) cat, (3) id, or (4) stof parameter to news.php, or (5) id parameter to print.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2897 
WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal the path in an error message, as demonstrated using cat.add.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2898 
NOTE: this issue has been disputed by the vendor.  FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive information.  NOTE: the vendor has disputed the issue, stating that "the problem is not a vulnerability at all, but in fact a fundamental issue of every single program that can store passwords transparently.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2899 
Multiple cross-site scripting (XSS) vulnerabilities in details.php in CjTagBoard 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date, (2) time, (3) name, (4) ip, (5) agent, or (6) msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2900 
Cross-site scripting (XSS) vulnerability in top.php in CjLinkOut 1.0 allows remote attackers to inject arbitrary web script or HTML via the 123 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2901 
Multiple Cross-site scripting (XSS) vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) message, or (3) ip parameter to thankyou.php or (4) emsg parameter to web2mail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2902 
SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands and bypass the file extension check via SQL code in the file extension of an uploaded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2903 
Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote attackers to execute arbitrary code via an ARJ archive containing a file with a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2904 
Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (application crash) via a zero in the port number of the protocol option header, which triggers an assert error in the makeConnection function in zebedee.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2912 
Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a negative Content-Length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2914 
ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function, which allows remote attackers to obtain encrypted configuration information and, if the key is known, modify the configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2915 
ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encryption (XOR encoding with a fixed byte mask) for configuration information, which could allow attackers to decrypt the information and possibly re-encrypt it in conjunction with CVE-2005-2914.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2916 
Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-14T04:00:00.000Z
CVE-2005-2917 
Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service (daemon restart).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-30T04:00:00.000Z
CVE-2005-2918 
The open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-15T04:00:00.000Z
CVE-2005-2919 
libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FSG packed executable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2920 
Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-20T04:00:00.000Z
CVE-2005-2922 
Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, and Helix Player allows remote malicious servers to cause a denial of service (crash) and possibly execute arbitrary code via a chunked Transfer-Encoding HTTP response in which either (1) the chunk header length is specified as -1, (2) the chunk header with a length that is less than the actual amount of sent data, or (3) a missing chunk header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T23:00:00.000Z
CVE-2005-2923 
The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service (crash) via a long argument to the LIST command, which causes IMail Server to reference invalid memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T01:00:00.000Z
CVE-2005-2925 
runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-11T04:00:00.000Z
CVE-2005-2926 
Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-2927 
Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-25T04:00:00.000Z
CVE-2005-2929 
Lynx 2.8.5, and other versions before 2.8.6dev.15, allows remote attackers to execute arbitrary commands via (1) lynxcgi:, (2) lynxexec, and (3) lynxprog links, which are not properly restricted in the default configuration in some environments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-2930 
Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-28T04:00:00.000Z
CVE-2005-2931 
Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T01:00:00.000Z
CVE-2005-2932 
Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-21T17:00:00.000Z
CVE-2005-2933 
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote (") character without a closing quote, which causes bytes after the double-quote to be copied into a buffer indefinitely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-13T04:00:00.000Z
CVE-2005-2934 
Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-02-24T01:00:00.000Z
CVE-2005-2935 
Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts to execute gsasDtServ.exe.  NOTE: it is not clear whether this overlaps CVE-2005-2940.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-09-15T04:00:00.000Z
CVE-2005-2936 
Unquoted Windows search path vulnerability in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, and RealPlayer 8 before 20060322 might allow local users to gain privileges via a malicious C:\program.exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-2938 
Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-2939 
Unquoted Windows search path vulnerability in VMWare Workstation 5.0.0 build-13124 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-2940 
Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, involving the programs (1) GIANTAntiSpywareMain.exe, (2) gcASNotice.exe, (3) gcasServ.exe, (4) gcasSWUpdater.exe, or (5) GIANTAntiSpywareUpdater.exe.  NOTE: it is not clear whether this overlaps CVE-2005-2935.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-18T11:00:00.000Z
CVE-2005-2943 
Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-10-13T04:00:00.000Z