PatchTheCVEmasqmail vulnerabilities
Recent CVEs affecting masqmail products. 4 tracked.
masqmail has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-09-21. Highest priority: CVE-2005-2662 (score 52/100).
- CVE-2005-2663 LOW 2.1 DOWNGRADE masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.
- CVE-2005-2662 HIGH 7.5 DOWNGRADE masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that
- CVE-2002-1279 HIGH 7.2 DOWNGRADE Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local use
- CVE-2001-1173 HIGH 7.2 DOWNGRADE Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.
FAQ
How do I fix masqmail vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is masqmail being exploited right now?
None of the tracked masqmail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which masqmail CVE should I patch first?
CVE-2005-2662 currently ranks highest (52/100): masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that.