CVE-2000-0583

Name of the Vulnerable Software and Affected Versions vpopmail versions prior to 4.8

Description The issue is related to the vchkpw program in vpopmail, which does not properly cleanse an untrusted format string used in a call to syslog. This allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.

Recommendations For versions prior to 4.8, update to version 4.8 or later to resolve the issue.