PT-2001-1654 · Mercury · Mercury Mta Pop3 Server

Publicado 2001-06-27 · Atualizado 2008-09-05 · CVE-2001-0442

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mercury MTA POP3 server for NetWare versions 1.48 and earlier

Description The issue is related to a buffer overflow in the Mercury MTA POP3 server for NetWare, which can be triggered by a long APOP command. This can cause a denial of service and potentially allow remote attackers to execute arbitrary code.

Recommendations For Mercury MTA POP3 server for NetWare versions 1.48 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-0442

Produtos afetados

Mercury Mta Pop3 Server

Referências · 6

• 🔥 https://exploit-db.com/exploits/20792 · Exploit
• http://online.securityfocus.com/archive/1/179217 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0442 · Nota de Segurança
• http://iss.net/security_center/static/6444.php · Nota
• http://securityfocus.com/bid/2641 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2001-04/0378.html · Aviso do Fabricante