CVE-2003-1177 Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the P...
HighCVSS 7.5
EPSS 12.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the POP3 server or (2) AUTHENTICATE command to the IMAP server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atrium software mercur mailserver | = 3.3 | No fix listed |
| atrium software mercur mailserver | = 3.3_sp1 | No fix listed |
| atrium software mercur mailserver | = 3.3_sp2 | No fix listed |
| atrium software mercur mailserver | = 4.1 | No fix listed |
| atrium software mercur mailserver | = 4.1_sp1 | No fix listed |
| atrium software mercur mailserver | = 4.2 | No fix listed |
| atrium software mercur mailserver | = 4.2_sp1 | No fix listed |
| atrium software mercur mailserver | = 4.2_sp2 | No fix listed |
References
- 20031024 Vulnerability in MERCUR Mail Server v4.2 SP3 and below exploit mailing-list
- 10038 patch third-party-advisory
- www.atrium-software.com
- 2688 vdb-entry
- www.securiteam.com exploit
- 8861 exploit vdb-entry
- 8889 exploit vdb-entry
- mercur-auth-command-dos(13468) vdb-entry