CVE-2004-1211 Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long argumen...
HighCVSS 10.0
EPSS 72.5%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| david harris mercury | = 4.0.1a | No fix listed |
References
- home.kabelfoon.nl
- 20041201 Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003. mailing-list
- 20041201 Multiple buffer overflows exist in Mercury/32, v4.01a, Dec 8 2003. mailing-list
- 13348 third-party-advisory vendor-advisory
- 12508 vdb-entry
- 11775 exploit patch vdb-entry vendor-advisory
- mercury-command-bo(18318) vdb-entry