CVE-2003-0140

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.

Desbordamiento de búfer en Mutt 1.4.0 y posiblemente versiones anteriores, y 1.5.x hasta 1.5.3 permite a un servidor IMAP remoto malicioso causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario mediante una carpeta especialmente hecha.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2003-03-13 CVE Reserved
2003-03-21 CVE Published
2024-08-08 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (19)

URL	Tag	Source
http://marc.info/?l=bugtraq&m=104817995421439&w=2	Mailing List
http://marc.info/?l=bugtraq&m=104818814931378&w=2	Mailing List
http://marc.info/?l=bugtraq&m=104852190605988&w=2	Mailing List
http://marc.info/?l=bugtraq&m=105171507629573&w=2	Mailing List
http://www.coresecurity.com/common/showdoc.php?idx=310&idxseccion=10	X_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/11583	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A434	Signature

URL	Date	SRC

URL	Date	SRC
http://www.securityfocus.com/bid/7120	2017-10-11

URL	Date	SRC
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000626	2017-10-11
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000630	2017-10-11
http://www.debian.org/security/2003/dsa-268	2017-10-11
http://www.gentoo.org/security/en/glsa/glsa-200303-19.xml	2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2003:041	2017-10-11
http://www.novell.com/linux/security/advisories/2003_020_mutt.html	2017-10-11
http://www.redhat.com/support/errata/RHSA-2003-109.html	2017-10-11
http://www.securityfocus.com/archive/1/315679	2017-10-11
https://access.redhat.com/security/cve/CVE-2003-0140	2003-05-22
https://bugzilla.redhat.com/show_bug.cgi?id=1616983	2003-05-22

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mutt Search vendor "Mutt"		Mutt Search vendor "Mutt" for product "Mutt"				1.3.12 Search vendor "Mutt" for product "Mutt" and version "1.3.12"		-		Affected
Mutt Search vendor "Mutt"		Mutt Search vendor "Mutt" for product "Mutt"				1.3.16 Search vendor "Mutt" for product "Mutt" and version "1.3.16"		-		Affected
Mutt Search vendor "Mutt"		Mutt Search vendor "Mutt" for product "Mutt"				1.3.17 Search vendor "Mutt" for product "Mutt" and version "1.3.17"		-		Affected
Mutt Search vendor "Mutt"		Mutt Search vendor "Mutt" for product "Mutt"				1.3.22 Search vendor "Mutt" for product "Mutt" and version "1.3.22"		-		Affected
Mutt Search vendor "Mutt"		Mutt Search vendor "Mutt" for product "Mutt"				1.3.24 Search vendor "Mutt" for product "Mutt" and version "1.3.24"		-		Affected
Mutt Search vendor "Mutt"		Mutt Search vendor "Mutt" for product "Mutt"				1.3.25 Search vendor "Mutt" for product "Mutt" and version "1.3.25"		-		Affected
Mutt Search vendor "Mutt"		Mutt Search vendor "Mutt" for product "Mutt"				1.3.27 Search vendor "Mutt" for product "Mutt" and version "1.3.27"		-		Affected
Mutt Search vendor "Mutt"		Mutt Search vendor "Mutt" for product "Mutt"				1.4.0 Search vendor "Mutt" for product "Mutt" and version "1.4.0"		-		Affected
Mutt Search vendor "Mutt"		Mutt Search vendor "Mutt" for product "Mutt"				1.5.3 Search vendor "Mutt" for product "Mutt" and version "1.5.3"		-		Affected