Unscored severity · published Oct 20, 2005
CVE-2005-3182
Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in…
–
CVSS
4%
EPSS
No
On KEV
Description
Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests. NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could mean that the overflow affects other products as well.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mailsecurity · Gfi
8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3182
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3182
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0290.html
Patch
http://kbase.gfi.com/showarticle.asp?id=KBID002451
marc.info
http://marc.info/?l=bugtraq&m=112914475508191&w=2
Patch
http://secunia.com/advisories/17136/
securityreason.com
http://securityreason.com/securityalert/74
securitytracker.com
http://securitytracker.com/id?1015046
More from Mailsecurity
–
CVE-2004-1312
A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings,…
–
CVE-2002-1121
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of…