CVE-2005-1478

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-11 · updated 2026-06-16

Description

Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifiers in the xtellmail command.

Affected products

NetWin Dmail: 3.1a, 3.1b

References

http://marc.info/?l=bugtraq&m=111531804617905&w=2
http://secunia.com/advisories/15242
http://securitytracker.com/id?1013885
http://www.security.org.sg/vuln/dmail31a.html
http://www.securityfocus.com/bid/13505
https://exchange.xforce.ibmcloud.com/vulnerabilities/20414
http://marc.info/?l=bugtraq&m=111531804617905&w=2
http://secunia.com/advisories/15242
http://securitytracker.com/id?1013885
http://www.security.org.sg/vuln/dmail31a.html
http://www.securityfocus.com/bid/13505
https://exchange.xforce.ibmcloud.com/vulnerabilities/20414

Get alerted when CVE-2005-1478 or the next vulnerability affects your stack