Description
Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATH_INFO environment variable.
References
- http://sourceforge.net/project/shownotes.php?group_id=6691&release_id=395211
- qmialadmin-qmailadmin-bo(25065) vdb-entry
- GLSA-200611-15 vendor-advisory
- 23705 vdb-entry
- 23019 third-party-advisory
- 19262 third-party-advisory
- 16994 vdb-entry
- ADV-2006-0852 vdb-entry
- http://cvs.sourceforge.net/viewcvs.py/qmailadmin/qmailadmin/qmailadmin.c?r1=1.6.2.10&r2=1.6.2.11