CyberSec.Space Logo
Back to CVE Browser

CVE-2003-1322

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0620%
EPSS Percentile12.43th
PublishedDec 31, 2003
Last ModifiedApr 16, 2026

Vulnerability Description

Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long (1) EXAMINE, (2) DELETE, (3) SUBSCRIBE, (4) RENAME, (5) UNSUBSCRIBE, (6) LIST, (7) LSUB, (8) STATUS, (9) LOGIN, (10) CREATE, or (11) SELECT command.

Affected Platforms (CPE)

📦
Atrium Software

Mercur Mailserver

<= 4.2

References & Advisories

🔗 http://www.iss.net/security_center/static/12203.php
🔗 http://www.securityfocus.com/archive/1/324136
🔗 http://www.securityfocus.com/bid/7842
🔗 http://www.iss.net/security_center/static/12203.php
🔗 http://www.securityfocus.com/archive/1/324136
🔗 http://www.securityfocus.com/bid/7842

Related Vulnerabilities

CVE-2002-10737.5

Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long pass...

CVE-2003-11777.5

Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service an...

CVE-2003-019610.0

Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2003-043110.0

The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown con...