CVE-2003-0297

c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-06-16

Last modified

2024-08-08

Affected products

• C-client (University Of Washington)
• Imap-2002b (University Of Washington)
• Pine (University Of Washington)

References

• http://marc.info/?l=bugtraq&m=105294024124163&w=2
• http://www.redhat.com/support/errata/RHSA-2005-015.html
• http://www.redhat.com/support/errata/RHSA-2005-114.html
• http://www.securityfocus.com/archive/1/430302/100/0/threaded