CVE-2005-0893: Smail

High severity, CVSS 7.6. EPSS: 1.8% chance of exploitation in the next 30 days.

modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.

Affected products

• Smail Smail: version 3.2.0.120 only

Published 2005-05-02. Last modified 2026-06-16.