high7.5Public exploit code
CVE-2003-0487
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kerio MailServer 5.6.3 do_map Module - Overflow2003-06-18 · dos · linux · Verified
- Kerio MailServer 5.6.3 list Module - Overflow2003-06-18 · dos · linux · Verified
- Kerio MailServer 5.6.3 add_acl Module - Overflow2003-06-18 · dos · linux · Verified
- Kerio MailServer 5.6.3 subscribe Module - Overflow2003-06-18 · dos · linux · Verified
- Kerio MailServer 5.6.3 - Remote Buffer Overflow2003-06-27 · remote · linux · Verified
Impact
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kerio | Kerio Mailserver | Version 5.6.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=105596982503760&w=2
- http://nautopia.org/vulnerabilidades/kerio_mailserver.htm
- http://www.securityfocus.com/bid/7967
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12368
- http://marc.info/?l=bugtraq&m=105596982503760&w=2
- http://nautopia.org/vulnerabilidades/kerio_mailserver.htm
- http://www.securityfocus.com/bid/7967
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12368