CVE-2005-2387

Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via (1) a RCPT TO command with a long DNS name, or (2) a large number of RCPT TO commands with a long e-mail name arugment in the last command.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.15% chance of exploitation in the next 30 days, 87th percentile

Published

2005-07-27

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://seclists.org/lists/bugtraq/2005/Jul/0402.html

References

• CVE Record
• NVD entry

Related

• CVE-2005-2386
• CVE-2005-2397
• CVE-2005-2383
• CVE-2005-2403
• CVE-2005-2373
• CVE-2005-2409