CVE-2002-0198 Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename.
HighCVSS 10.0
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paul l daniels inflex | = 1.0.10 | No fix listed |
| paul l daniels ripmime | = 1.2.0 | No fix listed |
| paul l daniels ripmime | = 1.2.1 | No fix listed |
| paul l daniels ripmime | = 1.2.2 | No fix listed |
| paul l daniels ripmime | = 1.2.3 | No fix listed |
| paul l daniels ripmime | = 1.2.4 | No fix listed |
| paul l daniels ripmime | = 1.2.5 | No fix listed |
| paul l daniels ripmime | = 1.2.6 | No fix listed |
References
- 20020122 pldaniels - ripMime 1.2.6 and lower? mailing-list
- pldaniels.org
- ripmime-long-filename-bo(7983) patch vdb-entry vendor-advisory
- 3941 vdb-entry