CVE-2003-0299
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors.
El cliente IMAP, usado en mutt 1.4.1 y Balsa 2.0.10, permite que servidores IMAP remotos dañinos provoquen una denegación de servicio y posiblemente ejecuten código arbitrario mediante ciertos valores de tamaño para mailbox muy grandes (lo que origina un desbordamiento de búfer de enteros).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2003-05-14 CVE Reserved
- 2003-05-15 CVE Published
- 2024-08-08 CVE Updated
- 2024-09-22 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=bugtraq&m=105294024124163&w=2 | Mailing List |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mutt Search vendor "Mutt" | Mutt Search vendor "Mutt" for product "Mutt" | 1.4.1 Search vendor "Mutt" for product "Mutt" and version "1.4.1" | - |
Affected
| ||||||
| Stuart Parmenter Search vendor "Stuart Parmenter" | Balsa Search vendor "Stuart Parmenter" for product "Balsa" | 2.0.10 Search vendor "Stuart Parmenter" for product "Balsa" and version "2.0.10" | - |
Affected
| ||||||