CVE-2001-1078
eXtremail <1.1.9 - RCE
Title source: llmDescription
Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, and the POP3 commands (5) USER and (6) other commands that can be executed after POP3 authentication.
Exploits (4)
References (5)
Scores
EPSS
0.1445
EPSS Percentile
94.5%
Details
Status
published
Products (14)
extremail/extremail
1.0
extremail/extremail
1.0.1
extremail/extremail
1.0.2
extremail/extremail
1.0.3
extremail/extremail
1.1
extremail/extremail
1.1.1
extremail/extremail
1.1.2
extremail/extremail
1.1.3
extremail/extremail
1.1.4
extremail/extremail
1.1.5
... and 4 more
Published
Jun 21, 2001
Tracked Since
Feb 18, 2026