| Vulnerability Name: | CVE-2003-0297 (CCN-12299) | ||||||||
| Assigned: | 2003-05-14 | ||||||||
| Published: | 2003-05-14 | ||||||||
| Updated: | 2018-10-19 | ||||||||
| Summary: | c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Wed May 14 2003 - 13:49:20 CDT Buffer overflows in multiple IMAP clients Source: MITRE Type: CNA CVE-2003-0297 Source: MITRE Type: CNA CVE-2003-0298 Source: MITRE Type: CNA CVE-2003-0299 Source: BUGTRAQ Type: UNKNOWN 20030514 Buffer overflows in multiple IMAP clients Source: CCN Type: RHSA-2005-015 pine security update Source: CCN Type: RHSA-2005-114 imap security update Source: CCN Type: Gentoo Linux Security Announcement 200305-12 uw-imapd - buffer overflow Source: REDHAT Type: UNKNOWN RHSA-2005:015 Source: REDHAT Type: UNKNOWN RHSA-2005:114 Source: FEDORA Type: UNKNOWN FLSA:184074 Source: CCN Type: BID-7602 Multiple Vendor IMAP Client Mailbox Size Memory Corruption Vulnerability Source: CCN Type: University of Washington Web site UW IMAP software -- IMAP Information Center Source: CCN Type: Ximian Web site Ximian : Products : Ximian Evolution Source: XF Type: UNKNOWN imap-mailbox-integer-overflow(12299) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||