CVE-2000-0198

CVE-2000-0198 affects the MERCUR mail server suite’s POP3 and IMAP servers. The issue is a buffer overflow that allows remote attackers to cause a denial of service. The public documents cite a base severity of MEDIUM (CVSS v2.0: AV:N/AC:L/Au:N/C:N/I:N/A:P) with a network attack vector and no aut...

CVE-2003-1177

CVE-2003-1177 describes a buffer overflow in the base64 decoder of MERCUR Mailserver 4.2 before SP3a. An attacker could trigger it via long AUTH (POP3) or AUTHENTICATE (IMAP) commands, potentially causing a denial of service and possibly arbitrary code execution.

CVE-2000-0318

CVE-2000-0318 affects Atrium Mercur Mail Server 3.2 via a local directory traversal vulnerability (dot-dot). The vulnerability allows a local attacker to read other users’ email and to create arbitrary files by exploiting a path traversal issue. The available documents do not provide explicit exp...

CVE-2003-1322

CVE-2003-1322 concerns Atrium MERCUR IMAPD in MERCUR Mailserver up to version 4.2.15.0. The vulnerability is described as multiple stack-based buffer overflows in the IMAPD process that can be triggered by long commands, including: EXAMINE, DELETE, SUBSCRIBE, RENAME, UNSUBSCRIBE, LIST, LSUB, STAT...

CVE-2000-0239

CVE-2000-0239 concerns the MERCUR WebView WebMail server. A buffer overflow is triggered by a long mail_user parameter in a GET request (e.g., /mmain.html&mail_user=…); this can cause a denial of service and, per the Nessus plugin, potentially allow arbitrary code execution on a remote host. Affe...

CVE-2002-1073

CVE-2002-1073 describes a buffer overflow in the control service of MERCUR Mailserver 4.2, allowing remote attackers to execute arbitrary code via a long password. The vulnerability is documented in CVE databases (NVD/CVE) with a CVSS v2 base score of 7.5 (HIGH) and remote network access without ...