Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null byte followed by a format string specifier, which is not counted by the mechanism.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perdition IMAP代理str_vwrite函数远程格式串处理漏洞
Vulnerability Description
Perdition是日本Horms Solutions公司的一款POP3和IMAP4代理服务器，它能够处理加密的纯文本和SSL/TLS连接，以及将用户重定向到访问的服务器。 Perdition IMAPD的一个IMAP输出字符串格式化函数中存在格式串漏洞，远程攻击者可能利用此漏洞控制服务器。 在某些情况下，未经验证便将IMAP标签(IMAP命令的最初部分)拷贝到了字符缓冲区，然后做为格式串将这个缓冲区传送给了vsnprintf()。在调用vsnprintf之前，执行了以下格式串验证以防范注入： str.c
CVSS Information
N/A
Vulnerability Type
N/A