Published: 25/06/2002 Updated: 10/10/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and previous versions, allows remote authenticated users to execute arbitrary code via a long BODY request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
university of washington uw-imap 2000.287
university of washington uw-imap 2000.315
university of washington uw-imap 2000.283
university of washington uw-imap 2000.284

source: wwwsecurityfocuscom/bid/4713/info Wu-imapd is vulnerable to a buffer overflow condition This has been reported to occur when a valid user requests partial mailbox attributes Exploitation may result in the execution of arbitrary code as the server process An attacker may also be able to crash the server, resulting in a denial o ...

source: wwwsecurityfocuscom/bid/4713/info Wu-imapd is vulnerable to a buffer overflow condition This has been reported to occur when a valid user requests partial mailbox attributes Exploitation may result in the execution of arbitrary code as the server process An attacker may also be able to crash the server, resulting in a denial of ...

NVD-CWE-Other http://www.washington.edu/imap/buffer.html ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-021.0.txt http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000487 http://www.linuxsecurity.com/advisories/other_advisory-2120.html http://online.securityfocus.com/advisories/4167 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-034.php http://www.redhat.com/support/errata/RHSA-2002-092.html http://www.kb.cert.org/vuls/id/961489 http://www.securityfocus.com/bid/4713 http://www.iss.net/security_center/static/9055.php http://marc.info/?l=bugtraq&m=102107222100529&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/10803 https://nvd.nist.gov https://www.exploit-db.com/exploits/21443/

CVE-2002-0379

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect