emacs21: format string vulnerability in "movemail" [LWN.net]

Package(s):

emacs21

CVE #(s):

CAN-2005-0100

Created:

February 7, 2005

Updated:

May 15, 2006

Description:

Max Vozeler discovered a format string vulnerability in the "movemail" utility of Emacs. By sending specially crafted packets, a malicious POP3 server could cause a buffer overflow, which could be exploited to execute arbitrary code with the privileges of the user and the "mail" group.

Alerts:

Fedora-Legacy	FLSA:152898	2006-05-12
Debian	DSA-685-1	2005-02-17
Mandrake	MDKSA-2005:038	2005-02-15
Gentoo	200502-20	2005-02-15
Fedora	FEDORA-2005-146	2005-02-14
Fedora	FEDORA-2005-145	2005-02-14
Red Hat	RHSA-2005:133-01	2005-02-15
Red Hat	RHSA-2005:110-01	2005-02-15
Red Hat	RHSA-2005:134-01	2005-02-10
Red Hat	RHSA-2005:112-01	2005-02-10
Fedora	FEDORA-2005-116	2005-02-08
Fedora	FEDORA-2005-115	2005-02-08
Debian	DSA-671-1	2005-02-08
Debian	DSA-670-1	2005-02-08
Ubuntu	USN-76-1	2005-02-07

(Log in to post comments)