CVE-2002-2404

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via a long request to the POP3 port (TCP port 110).

Affected (2)

Products: Curtis Specialty Consulting: Iispop

Curtis Specialty Consulting

1 product

Iispop

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Curtis Specialty Consulting Iispop	Version 1.161
Curtis Specialty Consulting Iispop	Version 1.181

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (6)

http://marc.info/?l=bugtraq&m=103729432602720&w=2

Source: cve@mitre.org

http://www.iss.net/security_center/static/10632.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/6183

Source: cve@mitre.org

Exploit

http://marc.info/?l=bugtraq&m=103729432602720&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/10632.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/6183

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.