CVEvulnerability
CVE-2004-1211
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands.
Affected configurations
• david harris mercury 4.0.1a
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://home.kabelfoon.nl/~jaabogae/han/m_401b.html home.kabelfoon.nl
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029701.html lists.grok.org.uk
- http://marc.info/?l=bugtraq&m=110193702909991&w=2 marc.info
- http://secunia.com/advisories/13348 Vendor Advisory
- http://www.osvdb.org/12508 www.osvdb.org
- http://www.securityfocus.com/bid/11775 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18318 exchange.xforce.ibmcloud.com
- http://home.kabelfoon.nl/~jaabogae/han/m_401b.html home.kabelfoon.nl
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029701.html lists.grok.org.uk
- http://marc.info/?l=bugtraq&m=110193702909991&w=2 marc.info
- http://secunia.com/advisories/13348 Vendor Advisory
- http://www.osvdb.org/12508 www.osvdb.org
- http://www.securityfocus.com/bid/11775 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18318 exchange.xforce.ibmcloud.com