Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

qmailadmin: buffer overflow

Package(s):

qmailadmin

CVE #(s):

CVE-2006-1141

Created:

November 21, 2006

Updated:

November 21, 2006

Description:

qmailAdmin fails to properly handle the "PATH_INFO" variable in qmailadmin.c. The PATH_INFO is a standard CGI environment variable filled with user supplied data.

Alerts:

Gentoo

200611-15

2006-11-21

(Log in to post comments)