CVE-2002-2338 The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) a...
MediumCVSS 5.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 0.9.2 | No fix listed |
| mozilla | = 0.9.2.1 | No fix listed |
| mozilla | = 0.9.3 | No fix listed |
| mozilla | = 0.9.4 | No fix listed |
| mozilla | = 0.9.4.1 | No fix listed |
| mozilla | = 0.9.5 | No fix listed |
| mozilla | = 0.9.6 | No fix listed |
| mozilla | = 0.9.7 | No fix listed |
| mozilla | = 0.9.8 | No fix listed |
| mozilla | = 0.9.9 | No fix listed |
| mozilla | = 1.0 | No fix listed |
| mozilla | = 1.0-rc1 | No fix listed |
| mozilla | = 1.0-rc2 | No fix listed |
| netscape communicator | = 4.0 | No fix listed |
| netscape communicator | = 4.4 | No fix listed |
| netscape communicator | = 4.5 | No fix listed |
| netscape communicator | = 4.06 | No fix listed |
| netscape communicator | = 4.6 | No fix listed |
| netscape communicator | = 4.07 | No fix listed |
| netscape communicator | = 4.7 | No fix listed |
| netscape communicator | = 4.08 | No fix listed |
| netscape communicator | = 4.51 | No fix listed |
| netscape communicator | = 4.61 | No fix listed |
| netscape communicator | = 4.72 | No fix listed |
| netscape communicator | = 4.73 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | = 4.74 | No fix listed |
| netscape communicator | = 4.75 | No fix listed |
| netscape communicator | = 4.76 | No fix listed |
| netscape communicator | = 4.77 | No fix listed |
| netscape navigator | = 6.0 | No fix listed |
| netscape navigator | = 6.01 | No fix listed |
| netscape navigator | = 6.1 | No fix listed |
| netscape navigator | = 6.2 | No fix listed |
| netscape navigator | = 6.2.1 | No fix listed |
| netscape navigator | = 6.2.2 | No fix listed |
References
- bugzilla.mozilla.org
- mozilla.org
- 20020612 Another small DoS on Mozilla <= 1.0 through pop3 mailing-list
- mozilla-netscape-pop3-dos(9343) vdb-entry
- MDKSA-2002:074 vendor-advisory
- 20020614 Another small DoS on Mozilla <= 1.0 through pop3 mailing-list
- 5002 exploit patch vdb-entry