FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-2958

This CVE name corresponds to:

Entered	Topic
2007-08-27	claws-mail -- POP3 Format String Vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2007-2958 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2007-2958
Phase	Assigned(20070531)

Description

Format string vulnerability in the inc_put_error function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies.

References

Source	Reference
MISC	http://secunia.com/secunia_research/2007-70/advisory/
MISC	https://bugzilla.redhat.com/show_bug.cgi?id=254121
CONFIRM	http://bugs.gentoo.org/show_bug.cgi?id=190104
FEDORA	FEDORA-2007-2009
GENTOO	GLSA-200710-29
SUSE	SUSE-SR:2007:020
BID	25430
VUPEN	ADV-2007-2971
OSVDB	40184
SECUNIA	26550
SECUNIA	26610
SECUNIA	27379
SECUNIA	27229
XF	sylpheed-incputerror-format-string(36238)