Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary code via format string specifiers in the SEARCH command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Mailutils imap4d SEARCH命令远程格式串处理漏洞
Vulnerability Description
GNU mailutils软件包是一个邮件工具集,包括本地和远程邮箱访问服务。imap4d server允许远程用户通过Internet消息访问协议检索邮件。 GNU mailutils的imap4d对SEARCH命令的处理上存在格式串漏洞,远程攻击者可能利用此漏洞在服务器上执行任意指令。如果服务处理了服务端恶意的搜索命令的话就会出现这个漏洞,成功利用这个漏洞需要攻击者有合法的用户名和口令登录到服务器上。
CVSS Information
N/A
Vulnerability Type
N/A