Lucene search

[email protected]CVE-2002-2338

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2338

2022-10-0316:23:49

CWE-20

[email protected]

web.nvd.nist.gov

cve-2002-2338

mozilla

netscape communicator

pop3

mail client

denial of service

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.053 Low

EPSS

Percentile

93.1%

JSON

The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.

Affected configurations

NVD

Node

mozillamozillaMatch0.9.2

mozillamozillaMatch0.9.2.1

mozillamozillaMatch0.9.3

mozillamozillaMatch0.9.4

mozillamozillaMatch0.9.4.1

mozillamozillaMatch0.9.5

mozillamozillaMatch0.9.6

mozillamozillaMatch0.9.7

mozillamozillaMatch0.9.8

mozillamozillaMatch0.9.9

mozillamozillaMatch1.0

mozillamozillaMatch1.0rc1

mozillamozillaMatch1.0rc2

netscapecommunicatorMatch4.0

netscapecommunicatorMatch4.4

netscapecommunicatorMatch4.5

netscapecommunicatorMatch4.06

netscapecommunicatorMatch4.6

netscapecommunicatorMatch4.07

netscapecommunicatorMatch4.7

netscapecommunicatorMatch4.08

netscapecommunicatorMatch4.51

netscapecommunicatorMatch4.61

netscapecommunicatorMatch4.72

netscapecommunicatorMatch4.73

netscapecommunicatorMatch4.74

netscapecommunicatorMatch4.75

netscapecommunicatorMatch4.76

netscapecommunicatorMatch4.77

netscapenavigatorMatch6.0

netscapenavigatorMatch6.0mac

netscapenavigatorMatch6.01

netscapenavigatorMatch6.1

netscapenavigatorMatch6.2

netscapenavigatorMatch6.2.1

netscapenavigatorMatch6.2.2

CPENameOperatorVersion
mozilla:mozillamozillaeq0.9.2
mozilla:mozillamozillaeq0.9.2.1
mozilla:mozillamozillaeq0.9.3
mozilla:mozillamozillaeq0.9.4
mozilla:mozillamozillaeq0.9.4.1
mozilla:mozillamozillaeq0.9.5
mozilla:mozillamozillaeq0.9.6
mozilla:mozillamozillaeq0.9.7
mozilla:mozillamozillaeq0.9.8
mozilla:mozillamozillaeq0.9.9

CPE	Name	Operator	Version
mozilla:mozilla	mozilla	eq	0.9.2
mozilla:mozilla	mozilla	eq	0.9.2.1
mozilla:mozilla	mozilla	eq	0.9.3
mozilla:mozilla	mozilla	eq	0.9.4
mozilla:mozilla	mozilla	eq	0.9.4.1
mozilla:mozilla	mozilla	eq	0.9.5
mozilla:mozilla	mozilla	eq	0.9.6
mozilla:mozilla	mozilla	eq	0.9.7
mozilla:mozilla	mozilla	eq	0.9.8
mozilla:mozilla	mozilla	eq	0.9.9

Rows per page:

1-10 of 331

References

bugzilla.mozilla.org/show_bug.cgi?id=144228

mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html

online.securityfocus.com/archive/1/276628

www.iss.net/security_center/static/9343.php

www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074

www.securityfocus.com/archive/1/276946

www.securityfocus.com/bid/5002

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.053 Low

EPSS

Percentile

93.1%

JSON

Related for CVE-2002-2338

cvelist1 nvd1 nessus1