CVE-2003-0487

Published: Aug 7, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.

Affected (1)

Products: Kerio: Kerio Mailserver

1 product

Kerio Mailserver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kerio Kerio Mailserver	Version 5.6.3

References (8)

http://marc.info/?l=bugtraq&m=105596982503760&w=2

Source: cve@mitre.org

http://nautopia.org/vulnerabilidades/kerio_mailserver.htm

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/7967

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/12368

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105596982503760&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://nautopia.org/vulnerabilidades/kerio_mailserver.htm

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/bid/7967

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/12368

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.