CVE-2008-0434

Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

10.35% chance of exploitation in the next 30 days, 95th percentile

Published

2008-01-23

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.securityfocus.com/archive/1/486722/100/0/threaded
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4947

References

• CVE Record
• NVD entry

Related

• CVE-2008-0433
• CVE-2008-0435
• CVE-2008-0432
• CVE-2008-0436
• CVE-2008-0431
• CVE-2008-0437