Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the POP3 server or (2) AUTHENTICATE command to the IMAP server.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mercur_mailserver | Atrium_software | 3.3 (including) | 3.3 (including) |
| Mercur_mailserver | Atrium_software | 3.3_sp1 (including) | 3.3_sp1 (including) |
| Mercur_mailserver | Atrium_software | 3.3_sp2 (including) | 3.3_sp2 (including) |
| Mercur_mailserver | Atrium_software | 4.1 (including) | 4.1 (including) |
| Mercur_mailserver | Atrium_software | 4.1_sp1 (including) | 4.1_sp1 (including) |
| Mercur_mailserver | Atrium_software | 4.2 (including) | 4.2 (including) |
| Mercur_mailserver | Atrium_software | 4.2_sp1 (including) | 4.2_sp1 (including) |
| Mercur_mailserver | Atrium_software | 4.2_sp2 (including) | 4.2_sp2 (including) |