Lucene search
MitreCVE-2003-1557HistoryApr 04, 2008 - 1:00 a.m.
CVE-2003-1557
2008-04-0401:00:00
CWE-119
mitre
web.nvd.nist.gov
21
cve-2003-1557
off-by-one buffer overflow
spamassassin
bsmtp
security vulnerability
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
8.2
Confidence
High
EPSS
0.065
Percentile
93.9%
Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode (“-B”), allows remote attackers to execute arbitrary code via email containing headers with leading “.” characters.
Affected configurations
Node
spamassassinspamassassinMatch2.40
ORspamassassinspamassassinMatch2.41
ORspamassassinspamassassinMatch2.42
ORspamassassinspamassassinMatch2.43
| Vendor | Product | Version | CPE |
|---|---|---|---|
| spamassassin | spamassassin | 2.40 | cpe:2.3:a:spamassassin:spamassassin:2.40:*:*:*:*:*:*:* |
| spamassassin | spamassassin | 2.41 | cpe:2.3:a:spamassassin:spamassassin:2.41:*:*:*:*:*:*:* |
| spamassassin | spamassassin | 2.42 | cpe:2.3:a:spamassassin:spamassassin:2.42:*:*:*:*:*:*:* |
| spamassassin | spamassassin | 2.43 | cpe:2.3:a:spamassassin:spamassassin:2.43:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2003-1557
2003-12-31 05:00:00
redhatcve
redhatcve
CVE-2003-1557
2015-10-30 10:28:06
debiancve
debiancve
CVE-2003-1557
2008-04-04 01:00:00
cvelist
cvelist
CVE-2003-1557
2008-04-04 01:00:00
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
8.2
Confidence
High
EPSS
0.065
Percentile
93.9%
Related for CVE-2003-1557