Unscored severity · published Apr 15, 2004
CVE-2004-0224
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute…
–
CVSS
3.3%
EPSS
No
On KEV
Description
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Courier Mta · Double Precision Incorporated
0.43; 0.43.1; 0.43.2; 0.44; 0.44.2 · source: NVD
CO
Courier-imap · Inter7
1.6; 1.7; 2.0.0; 2.1; 2.1.1; 2.1.2; +2 more · source: NVD
LI
Linux · Gentoo
1.4; 1.4; 1.4; 1.4 · source: NVD
SQ
Sqwebmail · Double Precision Incorporated
3.5.2; 3.5.3; 3.6.1; 3.6.2; 3.6_.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0224
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0224
Patch
http://secunia.com/advisories/11087/
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=5767
Patch
http://www.securityfocus.com/bid/9845
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15434
More from Courier Mta
–
CVE-2006-2659
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals)…
–
CVE-2003-0040
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name
–
CVE-2002-1311
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files
–
CVE-2002-0914
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year,…