Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
vpopmail格式化字符串借助用户输入漏洞
Vulnerability Description
vpopmail 4.8版本之前的vchkpw程序无法正确清洗调用到syslog的非信任格式化字符串。远程攻击者借助包含任意格式化指令的USER 或PASS命令导致拒绝服务漏洞。
CVSS Information
N/A
Vulnerability Type
N/A