CVE-2002-1090 Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denial of service via long...
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denial of service via long server responses.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libesmtp(Debian:12) | < 0.8.11-1 | 0.8.11-1 |
| debian/libesmtp(Debian:13) | < 0.8.11-1 | 0.8.11-1 |
| debian/libesmtp(Debian:14) | < 0.8.11-1 | 0.8.11-1 |
| libesmtp | <= 0.8.11 | No fix listed |
References
- Debian Security Tracker CVE-2002-1090 vendor-advisory
- www.stafford.uklinux.net