Approved changes feed: RSS · Atom

cpe:2.3:a:qwikmail:qwikmail_smtp:0.3:*:*:*:*:*:*:*

part: a version: 0.3 update: *

VendorQwikmail (8c9cc3d0-6eee-5887-923b-d33c334814fb)
ProductQwikmail Smtp (6e5ef83d-febf-5fc5-a638-afe2c8060ad8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ammmir/qwikmail purl2cpe 2026-06-01 10:14:59.232684
pkg:sourceforge/qwikmail purl2cpe 2026-06-01 10:14:59.232688

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-2677 vulnerable 2026-06-08 04:48:10.570123 Details available
Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.
Published: 2007-02-22T22:00:00.000Z
Updated: 2024-08-08T01:36:25.315Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.