Description
Format string vulnerability in vsybase.c in vpopmail 5.4.2 and earlier has unknown impact and attack vectors. NOTE: in a followup post, it was observed that the source code used constants that, when compiled, became static format strings. Thus this is not a vulnerability
References
- vpopmail-vsybase-format-string(17017) vdb-entry
- 20040817 vpopmail <= 5.4.2 (sybase vulnerability) mailing-list
- 20040819 [Fwd: Re: [vchkpw] vpopmail <= 5.4.2 (sybase vulnerability) (fwd)] mailing-list
- 20040818 [2Cents on] vpopmail <= 5.4.2 (sybase vulnerability) mailing-list
- 9147 vdb-entry
- 10962 vdb-entry