Back to CVE Browser

CVE-2004-2513

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1370%

EPSS Percentile31.55th

PublishedDec 31, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command.

Affected Platforms (CPE)

📦

Pmail

Pegasus

= 4.01

References & Advisories

🔗 http://home.kabelfoon.nl/~jaabogae/han/m_401b.html

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18295

🔗 https://www.exploit-db.com/exploits/663

🔗 http://home.kabelfoon.nl/~jaabogae/han/m_401b.html

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18295

🔗 https://www.exploit-db.com/exploits/663

Related Vulnerabilities

CVE-2008-000310.0

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus),...

CVE-2019-256879.8

Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attacker...

CVE-2009-38389.3

Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service...

CVE-2008-04957.8

Unspecified vulnerability in the Pegasus CIM Server in IBM Hardware Management Console (HMC) 7 R3.2.0 allows remote attackers to c...