Procmail - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2017-11-16.

Products

• Procmail - 5 CVEs

Newest CVEs of Procmail

• CVE-2017-16844 - CVSS 9.8 (critical), 2017-11-16: Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (application…
• CVE-2014-3618 - CVSS 7.5 (high), 2014-09-08: Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute…
• CVE-2001-0905 - CVSS 6.2 (medium), 2001-10-18: Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges…
• CVE-1999-0475 - CVSS 1.2 (low), 1999-04-05: A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
• CVE-1999-0439 - CVSS 7.5 (high), 1999-04-05: Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.