Back to CVE Browser

CVE-2005-0636

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0130%

EPSS Percentile18.88th

PublishedMar 2, 2005

Last ModifiedApr 16, 2026

Vulnerability Description

Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command.

Affected Platforms (CPE)

📦

Foxmail

Foxmail Email Server

= 2.0

References & Advisories

🔗 http://secunia.com/advisories/14145

🔗 http://securitytracker.com/id?1013356

🔗 http://www.securityfocus.com/archive/1/391960

🔗 http://www.securityfocus.com/bid/12711

🔗 http://secunia.com/advisories/14145

🔗 http://securitytracker.com/id?1013356

🔗 http://www.securityfocus.com/archive/1/391960

🔗 http://www.securityfocus.com/bid/12711

Related Vulnerabilities

CVE-2005-129910.0

The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

CVE-2005-266910.0

Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote at...

CVE-2005-266810.0

Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before...

CVE-2005-103710.0

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.