Approved changes feed: RSS · Atom

cpe:2.3:a:elm_development_group:elm:2.4:*:*:*:*:*:*:*

part: a version: 2.4 update: *

VendorElm Development Group (16a21108-1b9e-508b-8bd5-02aa9d38f135)
ProductElm (b412e496-1ab2-595f-befb-1cb7b7d5970e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-1323 vulnerable 2026-06-08 04:47:47.318610 Details available
Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group via unspecified vectors.
Published: 2007-03-30T01:00:00.000Z
Updated: 2024-09-17T02:47:53.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1334 vulnerable 2026-06-08 04:44:58.279239 Details available
Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument.
Published: 2001-09-12T04:00:00.000Z
Updated: 2024-08-01T17:11:02.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0114 vulnerable 2026-06-08 04:44:57.942859 Details available
Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.
Published: 2000-02-04T05:00:00.000Z
Updated: 2024-08-01T16:27:57.600Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.