3 results (0.003 seconds)

CVSS: 7.8EPSS: 2%CPEs: 8EXPL: 0

30 May 2006 — libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368834 •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

29 Nov 2002 — Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files. Courier sqwebmail antes de 0.40.0 no deja privilegios rápidamente despues del inicio, lo que podría permitir a usuarios locales leer ficheros arbitrarios. • http://marc.info/?l=bugtraq&m=103794021013436&w=2 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

04 Oct 2002 — Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop. • http://sourceforge.net/project/shownotes.php?release_id=93065 •