CVE-2002-1066

Published: Oct 4, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack.

Affected (7)

Products: T. Hauck: Jana Web Server

T. Hauck

1 product

Jana Web Server

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
T. Hauck Jana Web Server	Version 1.0
T. Hauck Jana Web Server	Version 1.45
T. Hauck Jana Web Server	Version 1.46
T. Hauck Jana Web Server	Version 2.0
T. Hauck Jana Web Server	Version 2.0_beta1
T. Hauck Jana Web Server	Version 2.0_beta2
T. Hauck Jana Web Server	Version 2.2.1