CVEブラウザに戻る

CVE-2003-1177

HIGH

7.5

CVSS Severity Score

EPSS Score0.1350%

EPSS Percentile36.64th

Published2003年12月31日

Last Modified2026年4月16日

Vulnerability Description

Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the POP3 server or (2) AUTHENTICATE command to the IMAP server.

Affected Platforms (CPE)

📦

Atrium Software

Mercur Mailserver

= 3.3

📦

Atrium Software

Mercur Mailserver

= 3.3_sp1

📦

Atrium Software

Mercur Mailserver

= 3.3_sp2

📦

Atrium Software

Mercur Mailserver

= 4.1

📦

Atrium Software

Mercur Mailserver

= 4.1_sp1

📦

Atrium Software

Mercur Mailserver

= 4.2

📦

Atrium Software

Mercur Mailserver

= 4.2_sp1

📦

Atrium Software

Mercur Mailserver

= 4.2_sp2

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2003-q4/1459.html

🔗 http://secunia.com/advisories/10038

🔗 http://www.atrium-software.com/mail%20server/pub/mcr42sp3a.html

🔗 http://www.osvdb.org/2688

🔗 http://www.securiteam.com/windowsntfocus/6U00N1P8KC.html

🔗 http://www.securityfocus.com/bid/8861

🔗 http://www.securityfocus.com/bid/8889

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/13468

関連する脆弱性情報

CVE-2003-132210.0

Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execut...

CVE-2002-10737.5

Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long pass...

CVE-2003-019610.0

Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2003-071510.0

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers...