Advanced

Local Buffer Overflow Vulnerability in XMAIL Advisory

Posted by tadelste on
FrSIRT		Mail this story
Print this story

A vulnerability has been identified in XMail, which may be exploited by malicious users to obtain elevated privileges. This issue is due to a stack overflow error in the "AddressFromAtPtr" function that does not properly handle an overly long hostname portion of an e-mail address passed to the "-t" command line option, which could be exploited by local attackers to execute arbitrary commands with "root" or "mail" privileges.

Full Story

  Nav
» Read more about: Story Type: Security

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

This topic does not have any threads posted yet!

You cannot post until you login.