CVE-2003-0057
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/02/2003
Last modified:
03/04/2025
Description
Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename that is not properly handled by the hypermail executable, or (2) by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:hypermail:hypermail:2.0b25:*:*:*:*:*:*:* | ||
cpe:2.3:a:hypermail:hypermail:2.1.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:hypermail:hypermail:2.1.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:hypermail:hypermail:2.1.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:hypermail:hypermail:2.1.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:hypermail:hypermail:2.1.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:hypermail:hypermail:2.1_.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0042.html
- http://marc.info/?l=bugtraq&m=104369136703903&w=2
- http://secunia.com/advisories/8030
- http://www.debian.org/security/2003/dsa-248
- http://www.securityfocus.com/bid/6689
- http://www.securityfocus.com/bid/6690
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11158
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0042.html
- http://marc.info/?l=bugtraq&m=104369136703903&w=2
- http://secunia.com/advisories/8030
- http://www.debian.org/security/2003/dsa-248
- http://www.securityfocus.com/bid/6689
- http://www.securityfocus.com/bid/6690
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11158