CVE Vulnerabilities

CVE-2003-0057

Published: Feb 19, 2003 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename that is not properly handled by the hypermail executable, or (2) by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname.

Affected Software

Name Vendor Start Version End Version
Hypermail Hypermail 2.0b25 2.0b25
Hypermail Hypermail 2.1.1 2.1.1
Hypermail Hypermail 2.1.2 2.1.2
Hypermail Hypermail 2.1.3 2.1.3
Hypermail Hypermail 2.1.4 2.1.4
Hypermail Hypermail 2.1.5 2.1.5
Hypermail Hypermail 2.1_.0 2.1_.0

References