CVE-2005-1100

None

CVSS

—

EPSS

11.0%

Published

May 2, 2005

CISA due date

—

The record

Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arbitrary code via format string specifiers in data that is passed directly to syslog.

Affected packages

Ecosystem	Package	Fixed
Debian:11	postfix-gld	1.5-1
Debian:12	postfix-gld	1.5-1
Debian:13	postfix-gld	1.5-1

Related vulnerabilities

CVE-2005-1099 Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon… Also affects postfix-gld