Buffer Overflow Vulnerability in MDaemon IMAP Service
CVE-2003-1470

Currently unrated

Key Information:

Vendor

Alt-n

Status
Mdaemon
Vendor
CVE Published:
31 December 2003

What is CVE-2003-1470?

The IMAP service in MDaemon Mail Server, versions up to 6.7.5, is vulnerable to a buffer overflow attack. Remote authenticated users can exploit this vulnerability by sending a specially crafted CREATE command with an excessively long mailbox name. This may lead to a denial of service (DoS) condition, allowing the attacker to crash the service. Furthermore, it can enable the execution of arbitrary code, posing a significant threat to the integrity and availability of the mail server.

References

http://www.securityfocus.com/bid/7446
vdb-entryx_refsource_BID
http://securityreason.com/securityalert/3296
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/319879
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.