• info
• discussion
• exploit
• solution
• references

Libremail Pop.c Remote Format String Vulnerability

Libremail is susceptible to a remote format string vulnerability.

This issue presents itself in the 'pop.c' file, when the application processes specially crafted data from a POP server.

This issue allows remote attackers to execute arbitrary machine code in the context of the affected application. A denial of service condition may arise due to failed exploitation attempts as well.

Libremail 1.1.0 and prior versions are affected.