NetSight
IP …
high7.5Public exploit code

CVE-2003-1177

Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the POP3 server or (2) AUTHENTICATE command to the IMAP server.

Affected products

VendorProductAffected versions
Atrium SoftwareMercur Mailserver
Versions 3.3, 3.3_sp1, 3.3_sp2, 4.1, 4.1_sp1, 4.2

References