Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• elm development group elmup to 2.5.5 inclusive

Other highest-scoring records for the same primary product.

• CVE-2005-2665Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitra
  35Monitor
• CVE-2003-0966Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code
  31Monitor
• CVE-1999-1334Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long R
  31Monitor
• CVE-2003-1323Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and
  27Monitor
• CVE-1999-0114Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package usi
  18Monitor
• CVE-1999-1184Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.
  18Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.