PT-2001-1923 · Computalynx · Cmail Pop3 Mail Server

Published 2001-10-12 · Updated 2008-09-05 · CVE-2001-0742

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Computalynx CMail POP3 mail server version 2.4.9

Description: The issue is related to a buffer overflow that allows remote attackers to run arbitrary code via a long HELO command.

Recommendations: For version 2.4.9, update to a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2001-0742

Affected Products

Cmail Pop3 Mail Server

References · 2

• http://securiteam.com/windowsntfocus/5UP0B204AY.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0742 · Security Note