Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mmmail POP3-SMTP守护程序远程格式串溢出漏洞
Vulnerability Description
mmmail提供使用MySQL的SMTP和POP3守护程序，以非root用户运行。 mmmail中的'mmpop3d'和'mmsmtpd'对用户提交的输入缺少正确的检查，可导致远程攻击者进行格式串溢出攻击，可能以mmmail进程权限在目标系统上执行任意指令。 问题存在于'mmpop3d'和'mmsmtpd'程序中的'mmsyslog()'函数，如果编译时定义'__GLIBC__'就会调用'syslog(3)'函数，并直接接收来自远程用户定义的格式串，远程攻击者可以精心构建格式字符串数据，syslog(3)
CVSS Information
N/A
Vulnerability Type
N/A