Lucene search
HistoryAug 31, 2007 - 11:17 p.m.
CVE-2007-4646
cve
buffer overflow
hexamail server
denial of service
remote attack
arbitrary code execution
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
High
0.617 Medium
EPSS
Percentile
97.8%
Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER command.
Affected configurations
Node
hexamailhexamail_serverMatch3.0.0.001_lite
| CPE | Name | Operator | Version |
|---|---|---|---|
| hexamail:hexamail_server | hexamail hexamail server | eq | 3.0.0.001_lite |
Related
nessus
nessus
Hexamail Server pop3 Service USER Command Remote Overflow
2007-09-11 00:00:00
prion
prion
Buffer overflow
2007-08-31 23:17:00
cvelist
cvelist
CVE-2007-4646
2007-08-31 23:00:00
nvd
nvd
CVE-2007-4646
2007-08-31 23:17:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
High
0.617 Medium
EPSS
Percentile
97.8%
Related for CVE-2007-4646