CVE-2008-0434

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 10%

exploitation probability

10%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbitrary code via format string specifiers in the CNHO command.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4947

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059788.html http://secunia.com/advisories/28562 http://securityreason.com/securityalert/3570 https://exchange.xforce.ibmcloud.com/vulnerabilities/39803 https://www.exploit-db.com/exploits/4947 http://www.securityfocus.com/archive/1/486722/100/0/threaded http://www.securityfocus.com/bid/27363 http://www.vupen.com/english/advisories/2008/0237