PT-2001-1654 · Mercury · Mercury Mta Pop3 Server

Published 2001-06-27 · Updated 2008-09-05 · CVE-2001-0442

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mercury MTA POP3 server for NetWare versions 1.48 and earlier

Description The issue is related to a buffer overflow in the Mercury MTA POP3 server for NetWare, which can be triggered by a long APOP command. This can cause a denial of service and potentially allow remote attackers to execute arbitrary code.

Recommendations For Mercury MTA POP3 server for NetWare versions 1.48 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0442

Affected Products

Mercury Mta Pop3 Server

References · 6

• 🔥 https://exploit-db.com/exploits/20792 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0442 · Security Note
• http://securityfocus.com/bid/2641 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2001-04/0378.html · Vendor Advisory
• http://online.securityfocus.com/archive/1/179217 · Note
• http://iss.net/security_center/static/6444.php · Note