← Database

CVE-2004-2417

HIGH CVSS: 7.5 Published: 2004-12-31 Modified: 2026-06-16

Description

Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) client hostname or (2) message-id, which are injected into a syslog message.

Affected Platforms

Smtp.Proxy Smtp.Proxy

Weakness Type

NVD-CWE-Other

References