CVE-2004-2677 - Vulnerability Details - OpenCVE

Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Qwikmail	Qwikmail Smtp

Configuration 1 [-]

cpe:2.3:a:qwikmail:qwikmail_smtp:0.3:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch
http://secunia.com/advisories/13037
http://securitytracker.com/id?1012016
http://unl0ck.info/advisories/qwik-smtpd.txt
http://www.securityfocus.com/archive/1/460600/100/0/threaded
http://www.securityfocus.com/bid/11572
http://www.vupen.com/english/advisories/2007/0687
https://exchange.xforce.ibmcloud.com/vulnerabilities/17917

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-02-22T22:00:00

Updated: 2024-08-08T01:36:25.315Z

Reserved: 2007-02-22T00:00:00

Link: CVE-2004-2677

Vulnrichment

No data.

NVD

Status : Modified

Published: 2004-12-31T05:00:00.000

Modified: 2024-11-20T23:53:57.530

Link: CVE-2004-2677

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-10-30T00:00:00", "descriptions": [{"lang": "en", "value": "Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-19T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "11572", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/11572"}, {"name": "1012016", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1012016"}, {"tags": ["x_refsource_MISC"], "url": "http://unl0ck.info/advisories/qwik-smtpd.txt"}, {"name": "13037", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/13037"}, {"name": "qwik-smtpd-format-string(17917)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"}, {"name": "ADV-2007-0687", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0687"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"}, {"name": "20070218 qwik-smtpd format string", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-2677", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "11572", "refsource": "BID", "url": "http://www.securityfocus.com/bid/11572"}, {"name": "1012016", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1012016"}, {"name": "http://unl0ck.info/advisories/qwik-smtpd.txt", "refsource": "MISC", "url": "http://unl0ck.info/advisories/qwik-smtpd.txt"}, {"name": "13037", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/13037"}, {"name": "qwik-smtpd-format-string(17917)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"}, {"name": "ADV-2007-0687", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0687"}, {"name": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch", "refsource": "CONFIRM", "url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"}, {"name": "20070218 qwik-smtpd format string", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T01:36:25.315Z"}, "title": "CVE Program Container", "references": [{"name": "11572", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/11572"}, {"name": "1012016", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1012016"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://unl0ck.info/advisories/qwik-smtpd.txt"}, {"name": "13037", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/13037"}, {"name": "qwik-smtpd-format-string(17917)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"}, {"name": "ADV-2007-0687", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0687"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"}, {"name": "20070218 qwik-smtpd format string", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-2677", "datePublished": "2007-02-22T22:00:00", "dateReserved": "2007-02-22T00:00:00", "dateUpdated": "2024-08-08T01:36:25.315Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:qwikmail:qwikmail_smtp:0.3:*:*:*:*:*:*:*", "matchCriteriaId": "25B9FEE0-9D5C-4377-BE95-28B418073827", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments."}], "id": "CVE-2004-2677", "lastModified": "2024-11-20T23:53:57.530", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/13037"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://securitytracker.com/id?1012016"}, {"source": "cve@mitre.org", "url": "http://unl0ck.info/advisories/qwik-smtpd.txt"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/11572"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0687"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/13037"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://securitytracker.com/id?1012016"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://unl0ck.info/advisories/qwik-smtpd.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/460600/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/11572"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0687"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17917"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}