ID CVE-2001-0442
Summary Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long APOP command.
References
Vulnerable Configurations
  • cpe:2.3:a:david_harris:mercury_nlm:1.45:*:*:*:*:*:*:*
    cpe:2.3:a:david_harris:mercury_nlm:1.45:*:*:*:*:*:*:*
  • cpe:2.3:a:david_harris:mercury_nlm:1.46:*:*:*:*:*:*:*
    cpe:2.3:a:david_harris:mercury_nlm:1.46:*:*:*:*:*:*:*
  • cpe:2.3:a:david_harris:mercury_nlm:1.47:*:*:*:*:*:*:*
    cpe:2.3:a:david_harris:mercury_nlm:1.47:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 05-09-2008 - 20:24)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 2641
bugtraq
  • 20010421 Mercury for NetWare POP3 server vulnerable to remote buffer overflow
  • 20010424 Re: Mercury for NetWare POP3 server vulnerable to remote buffer overflow
xf mercury-mta-bo(6444)
Last major update 05-09-2008 - 20:24
Published 27-06-2001 - 04:00
Last modified 05-09-2008 - 20:24
Back to Top