CVE-2002-1066 | BDVDB-2026-4687 Detail

Description#

Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html
http://www.iss.net/security_center/static/9689.php
http://www.securityfocus.com/bid/5327

Exploit#

No public exploit known

History#

Version 12002-08-31Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.