CVE-2000-0320 Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message l...
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm qpopper | = 2.53 | No fix listed |
| qualcomm qpopper | = 3.0 | No fix listed |
| sun cobalt raq 2 | All versions | No fix listed |
| sun cobalt raq 3i | All versions | No fix listed |
References
- 1133 exploit patch vdb-entry vendor-advisory
- 20000421 unsafe fgets() in qpopper mailing-list