CVEvulnerability
CVE-2002-2338
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
Affected configurations
• mozilla mozilla 0.9.2
• mozilla mozilla 0.9.2.1
• mozilla mozilla 0.9.3
• mozilla mozilla 0.9.4
• mozilla mozilla 0.9.4.1
• mozilla mozilla 0.9.5
• mozilla mozilla 0.9.6
• mozilla mozilla 0.9.7
• mozilla mozilla 0.9.8
• mozilla mozilla 0.9.9
• mozilla mozilla 1.0
• netscape communicator 4.0
• netscape communicator 4.4
• netscape communicator 4.5
• netscape communicator 4.06
• netscape communicator 4.6
• netscape communicator 4.07
• netscape communicator 4.7
• netscape communicator 4.08
• netscape communicator 4.51
• netscape communicator 4.61
• netscape communicator 4.72
• netscape communicator 4.73
• netscape communicator 4.74
• netscape communicator 4.75
• netscape communicator 4.76
• netscape communicator 4.77
• netscape navigator 6.0
• netscape navigator 6.01
• netscape navigator 6.1
• netscape navigator 6.2
• netscape navigator 6.2.1
• netscape navigator 6.2.2
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://bugzilla.mozilla.org/show_bug.cgi?id=144228 bugzilla.mozilla.org
- http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html mozilla.org
- http://online.securityfocus.com/archive/1/276628 online.securityfocus.com
- http://www.iss.net/security_center/static/9343.php www.iss.net
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074 www.mandrakesoft.com
- http://www.securityfocus.com/archive/1/276946 www.securityfocus.com
- http://www.securityfocus.com/bid/5002 Exploit, Patch
- http://bugzilla.mozilla.org/show_bug.cgi?id=144228 bugzilla.mozilla.org
- http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html mozilla.org
- http://online.securityfocus.com/archive/1/276628 online.securityfocus.com
- http://www.iss.net/security_center/static/9343.php www.iss.net
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074 www.mandrakesoft.com
- http://www.securityfocus.com/archive/1/276946 www.securityfocus.com
- http://www.securityfocus.com/bid/5002 Exploit, Patch