Lucene search
MitreCVELIST:CVE-2003-0143HistorySep 01, 2004 - 4:00 a.m.
CVE-2003-0143
2004-09-0104:00:00
mitre
www.cve.org
The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.
References
marc.info/?l=bugtraq&m=104739841223916&w=2
marc.info/?l=bugtraq&m=104748775900481&w=2
marc.info/?l=bugtraq&m=104768137314397&w=2
marc.info/?l=bugtraq&m=104792541215354&w=2
www.debian.org/security/2003/dsa-259
www.novell.com/linux/security/advisories/2003_018_qpopper.html
www.securityfocus.com/bid/7058
exchange.xforce.ibmcloud.com/vulnerabilities/11516
Related
nessus
nessus
Debian DSA-259-1 : qpopper - mail user privilege escalation
2004-09-29 00:00:00
Qpopper pop_msg() Macroname Remote Overflow
2003-03-13 00:00:00
SUSE-SA:2003:018: qpopper
2004-07-25 00:00:00
suse
suse
remote system compromise in qpopper
2003-03-21 12:48:04
openvas
openvas
Debian: Security Advisory (DSA-259)
2008-01-17 00:00:00
Debian Security Advisory DSA 259-1 (qpopper)
2008-01-17 00:00:00
nvd
nvd
CVE-2003-0143
2003-03-18 05:00:00
cve
cve
CVE-2003-0143
2004-09-01 04:00:00