Unscored severity · published Jun 25, 2002
CVE-2002-0379
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and…
–
CVSS
19.4%
EPSS
No
On KEV
Description
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request.
Exploitation
Is it being used?
Exploit prediction (EPSS)19.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UW
Uw-imap · University OF Washington
2000.283; 2000.284; 2000.287; 2000.315 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0379
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0379
distro.conectiva.com
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000487
marc.info
http://marc.info/?l=bugtraq&m=102107222100529&w=2
online.securityfocus.com
http://online.securityfocus.com/advisories/4167
www.iss.net
http://www.iss.net/security_center/static/9055.php
US Government Resource
http://www.kb.cert.org/vuls/id/961489
More from Uw-imap
–
CVE-2005-2933
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via…
–
CVE-2005-0198
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does…
–
CVE-2002-1782
The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP…