Lucene search
HistoryJun 16, 2003 - 4:00 a.m.
CVE-2003-0299
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.6%
The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors.
Affected configurations
Node
muttmuttMatch1.4.1
ORstuart_parmenterbalsaMatch2.0.10
Related
cve
cve
CVE-2003-0299
2003-06-16 04:00:00
cvelist
cvelist
CVE-2003-0299
2003-05-15 04:00:00
nessus
nessus
Debian DSA-274-1 : mutt - buffer overflow
2004-09-29 00:00:00
Debian DSA-300-1 : balsa - buffer overflow
2004-09-29 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.6%
Related for NVD:CVE-2003-0299