CVE-2005-3182 in MailSecurity

Sumário (Inglês)

Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests. NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could mean that the overflow affects other products as well.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

12/10/2005

Divulgação

20/10/2005

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
1802	GFI MailSecurity HTTP Management Excesso de tampão	119	Não definido	Correção oficial	CVE-2005-3182

Fontes

• MITRE
• NVD
• CVE Details