PT-2001-2147 · Pop3Lite · Pop3Lite

Published 2001-09-02 · Updated 2017-12-19 · CVE-2001-0996

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions POP3Lite versions prior to 0.2.4

Description The issue allows a remote attacker to append arbitrary text to the end of an email message by not properly quoting a . (dot) in the message. This could cause mail clients to interpret the appended text as valid POP server responses or other input, potentially leading to crashes or unexpected behavior.

Recommendations For versions prior to 0.2.4, update to version 0.2.4 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2001-0996

Affected Products

Pop3Lite

References · 4

• 🔥 http://securityfocus.com/bid/3278 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0996 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-08/0436.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7075 · Note