CVE-2005-0107: bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execut...

Security readout for executives and security teams

CVE-2005-0107 is a remote command execution issue in bsmtpd 2.3 and earlier. The software did not properly clean email addresses before processing them, so a remote attacker could cause command execution. This matters mainly where very old bsmtpd deployments still exist. Exposure is limited to systems still running bsmtpd 2.3 or earlier. The provided affected-product metadata is incomplete, so vulnerability managers should confirm by direct software inventory rather than relying on CPE matching. Prioritize as high where bsmtpd is present on reachable mail systems. For most modern environments, urgency depends on whether this obsolete software still exists in legacy infrastructure. Mitigation focus: Inventory hosts for bsmtpd and record exact versions.; If bsmtpd 2.3 or earlier is present, consult Debian DSA-690 and vendor guidance.; Upgrade, remove, or replace vulnerable bsmtpd deployments where supported..

Prepared

Jun 29, 2026, 23:55 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.