CVE-2007-4646 Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER command.
HighCVSS 10.0
EPSS 15.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hexamail server | = 3.0.0.001_lite | No fix listed |
References
- 26666 third-party-advisory
- 25496 vdb-entry
- 1018637 vdb-entry
- ADV-2007-3044 vdb-entry
- hexamailserver-pop-bo(36369) vdb-entry
- 4344 exploit