CVE Vulnerabilities

CVE-2003-1177

Published: Dec 31, 2003 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the POP3 server or (2) AUTHENTICATE command to the IMAP server.

Affected Software

Name Vendor Start Version End Version
Mercur_mailserver Atrium_software 3.3 3.3
Mercur_mailserver Atrium_software 3.3_sp1 3.3_sp1
Mercur_mailserver Atrium_software 3.3_sp2 3.3_sp2
Mercur_mailserver Atrium_software 4.1 4.1
Mercur_mailserver Atrium_software 4.1_sp1 4.1_sp1
Mercur_mailserver Atrium_software 4.2 4.2
Mercur_mailserver Atrium_software 4.2_sp1 4.2_sp1
Mercur_mailserver Atrium_software 4.2_sp2 4.2_sp2

References