Lucene search

[email protected]CVE-2002-1073

HistoryOct 04, 2002 - 4:00 a.m.

CVE-2002-1073

2002-10-0404:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1073

buffer overflow

mercur mailserver

remote code execution

nvd

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.044 Low

EPSS

Percentile

92.4%

JSON

Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.

Affected configurations

NVD

Node

atrium_softwaremercur_mailserverMatch3.3

atrium_softwaremercur_mailserverMatch3.3_sp1

atrium_softwaremercur_mailserverMatch3.3_sp2

atrium_softwaremercur_mailserverMatch4.1

atrium_softwaremercur_mailserverMatch4.1_sp1

atrium_softwaremercur_mailserverMatch4.2

CPENameOperatorVersion
atrium_software:mercur_mailserveratrium software mercur mailservereq3.3
atrium_software:mercur_mailserveratrium software mercur mailservereq3.3_sp1
atrium_software:mercur_mailserveratrium software mercur mailservereq3.3_sp2
atrium_software:mercur_mailserveratrium software mercur mailservereq4.1
atrium_software:mercur_mailserveratrium software mercur mailservereq4.1_sp1
atrium_software:mercur_mailserveratrium software mercur mailservereq4.2

CPE	Name	Operator	Version
atrium_software:mercur_mailserver	atrium software mercur mailserver	eq	3.3
atrium_software:mercur_mailserver	atrium software mercur mailserver	eq	3.3_sp1
atrium_software:mercur_mailserver	atrium software mercur mailserver	eq	3.3_sp2
atrium_software:mercur_mailserver	atrium software mercur mailserver	eq	4.1
atrium_software:mercur_mailserver	atrium software mercur mailserver	eq	4.1_sp1
atrium_software:mercur_mailserver	atrium software mercur mailserver	eq	4.2

References

archives.neohapsis.com/archives/bugtraq/2002-07/0195.html

www.iss.net/security_center/static/9618.php

www.securityfocus.com/bid/5261

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.044 Low

EPSS

Percentile

92.4%

JSON

Related for CVE-2002-1073

nvd1 cvelist1