Unscored severity · published Jun 16, 2003
CVE-2003-0297
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via…
–
CVSS
2.7%
EPSS
No
On KEV
Description
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
C-client · University OF Washington
All versions, or not specified · source: NVD
IM
Imap-2002b · University OF Washington
All versions, or not specified · source: NVD
PI
Pine · University OF Washington
4.53 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0297
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0297
marc.info
http://marc.info/?l=bugtraq&m=105294024124163&w=2
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2005-015.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2005-114.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/430302/100/0/threaded