Lucene search

K
cveMitreCVE-2007-1373
HistoryMar 10, 2007 - 12:19 a.m.

CVE-2007-1373

2007-03-1000:19:00
mitre
web.nvd.nist.gov
43
cve-2007-1373
mercury mail transport system
buffer overflow
remote code execution
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.84

Percentile

98.5%

Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary code via a long LOGIN command. NOTE: this might be the same issue as CVE-2006-5961.

Affected configurations

Nvd
Node
pmailmercury_mail_transport_systemRange4.01b
VendorProductVersionCPE
pmailmercury_mail_transport_system*cpe:2.3:a:pmail:mercury_mail_transport_system:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.84

Percentile

98.5%