CVEvulnerability
CVE-2003-0297
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-06-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Affected configurations
• university of washington c-client
• university of washington imap-2002b
• university of washington pine 4.53
References
- http://marc.info/?l=bugtraq&m=105294024124163&w=2 marc.info
- http://www.redhat.com/support/errata/RHSA-2005-015.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-114.html www.redhat.com
- http://www.securityfocus.com/archive/1/430302/100/0/threaded www.securityfocus.com
- http://marc.info/?l=bugtraq&m=105294024124163&w=2 marc.info
- http://www.redhat.com/support/errata/RHSA-2005-015.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-114.html www.redhat.com
- http://www.securityfocus.com/archive/1/430302/100/0/threaded www.securityfocus.com