20080120 AXIGEN 5.0.x AXIMilter Format String Exploitmailing list
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html CVE-2008-0434
Axigen 5.0.2 - AXIMilter Remote Format String
Record summary
CVE-2008-0434 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.
Description
Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBAxigen 5.0.2 - AXIMilter Remote Format StringExploitDB exploitby hempelNot analyzed1 file
References
928562Third-party advisory
http://secunia.com/advisories/28562 3570Third-party advisory
http://securityreason.com/securityalert/3570 20080120 AXIGEN 5.0.x AXIMilter Format String Exploitmailing list
http://www.securityfocus.com/archive/1/486722/100/0/threaded 27363vdb entry
http://www.securityfocus.com/bid/27363 ADV-2008-0237vdb entry
http://www.vupen.com/english/advisories/2008/0237 axigen-aximilter-format-string(39803)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39803 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-0434 4947exploit
https://www.exploit-db.com/exploits/4947