PT-2001-2147 · Pop3Lite · Pop3Lite

Publicado 2001-09-02 · Atualizado 2017-12-19 · CVE-2001-0996

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions POP3Lite versions prior to 0.2.4

Description The issue allows a remote attacker to append arbitrary text to the end of an email message by not properly quoting a . (dot) in the message. This could cause mail clients to interpret the appended text as valid POP server responses or other input, potentially leading to crashes or unexpected behavior.

Recommendations For versions prior to 0.2.4, update to version 0.2.4 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2001-0996

Produtos afetados

Pop3Lite

Referências · 4

• 🔥 http://securityfocus.com/bid/3278 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0996 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2001-08/0436.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7075 · Nota