CVE-2005-1127

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2005-1127
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2005-1127.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2005-1127
Related
Published
2005-05-02T04:00:00Z
Modified
2024-11-20T23:56:40Z
Summary
[none]
Details

Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.

References

Affected packages

Debian:11 / libnet-server-perl

Package

Name
libnet-server-perl
Purl
pkg:deb/debian/libnet-server-perl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.89-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / libnet-server-perl

Package

Name
libnet-server-perl
Purl
pkg:deb/debian/libnet-server-perl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.89-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / libnet-server-perl

Package

Name
libnet-server-perl
Purl
pkg:deb/debian/libnet-server-perl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.89-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:11 / postgrey

Package

Name
postgrey
Purl
pkg:deb/debian/postgrey?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.22-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / postgrey

Package

Name
postgrey
Purl
pkg:deb/debian/postgrey?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.22-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / postgrey

Package

Name
postgrey
Purl
pkg:deb/debian/postgrey?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.22-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}