Lucene search

K
nvd[email protected]NVD:CVE-2024-24736
HistoryJan 29, 2024 - 4:15 a.m.

CVE-2024-24736

2024-01-2904:15:07
web.nvd.nist.gov
yahoopops
pop3 service
denial of service
tcp port 110
remote
reboot
cve-2024-24736

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.711 High

EPSS

Percentile

98.1%

The POP3 service in YahooPOPs (aka YPOPs!) 1.6 allows a remote denial of service (reboot) via a long string to TCP port 110, a related issue to CVE-2004-1558.

Affected configurations

NVD
Node
ypopsemailypops\!Match1.6

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.711 High

EPSS

Percentile

98.1%

Related for NVD:CVE-2024-24736