Intrusion PreventionElm.Expire.Buffer.Overflow
Description
This indicates a possible exploit of a buffer-overflow vulnerability in Elm.
This vulnerability is caused by an error when the vulnerable software handles an SMTP message containing malformed "Expires" headers. It allows remote attackers to execute arbitrary code by sending a specially crafted SMTP message.
Affected Products
Elm Development Group ELM 2.5.7
Elm Development Group ELM 2.5.6
Elm Development Group ELM 2.5.5.
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the appropriate patch from the vendor or upgrade to a non-vulnerable version if available.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 10880 |
| Created | Sep 14, 2005 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2005-2665 |
| Exploit Prediction Score | 71.47% |
| Default Action | pass |
| Active | |
| Affected OS | Linux, Other |
| Affected App | Other |