CVE-2005-1127
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in...
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
- Record
CVE-2005-1127- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
- Record
CVE-2005-1127- Updated
- 2026-11-02
EUVDEUVD-2005-1130 No score
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
- Record
EUVD-2005-1130- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3c38-6263-x4qc No score
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in...
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
- Record
GHSA-3c38-6263-x4qc- Updated
- 2026-11-02
OSV No score
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
- Record
CVE-2005-1127- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-1127 No score
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy Server (Postgrey) 1.18 and earlier, and possibly other products, allows remote attackers to cause a denial of service (crash) via format string specifiers that are not properly handled before being sent to syslog, as demonstrated using sender addresses to Postgrey.
- Record
DEBIAN-CVE-2005-1127- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libnet-server-perlDebian:12 |
before 0.89-1 | 0.89-1 |
libnet-server-perlDebian:13 |
before 0.89-1 | 0.89-1 |
libnet-server-perlDebian:14 |
before 0.89-1 | 0.89-1 |
postgreyDebian:12 |
before 1.22-1 | 1.22-1 |
postgreyDebian:13 |
before 1.22-1 | 1.22-1 |
postgreyDebian:14 |
before 1.22-1 | 1.22-1 |
postgreyDebian:3.1 |
before 1.21-1sarge1, plus listed versions 1.21-1 |
1.21-1sarge1 |
libnet-server-perlDebian:3.1 |
before 0.87-3sarge1, plus listed versions 0.87-3 |
0.87-3sarge1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1127 is a medium vulnerability (CVSS 5.0) in Postgrey, published April 16, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.70%, the 86th percentile. Fixed in libnet-server-perl 0.89-1.
References
gentoo.org/security/en/glsa/glsa-200608-18.xml
debian.org/security/2006/dsa-1122
secunia.com/advisories/21452
lists.ee.ethz.ch/postgrey/msg00630.html
osvdb.org/15517
Show 13 moreShow less
marc.info?l=full-disclosure&m=111354538331167&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/20108
mandriva.com/security/advisories?name=MDKSA-2006:131
securityfocus.com/bid/13193
nvd.nist.gov/vuln/detail/CVE-2005-1127
github.com/advisories/GHSA-3c38-6263-x4qc
security-tracker.debian.org/tracker/CVE-2005-1127