CVE-2003-0564

Hitachi Groupmax Mail Security Option and PKI Runtime Library - Denial of Service via ASN.1 Constructs in S/MIME Email

Title source: llm

Description

Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.

References (13)

Core 13

Core References

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/428230

Patch, Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2004-110.html

Mailing List vendor-advisory x_refsource_fedora

http://marc.info/?l=bugtraq&m=109900315219363&w=2

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11462

Patch, Vendor Advisory x_refsource_misc

http://www.uniras.gov.uk/vuls/2003/006489/smime.htm

Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/8981

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2004-112.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/13603

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A872

Mailing List vendor-advisory x_refsource_hp

http://marc.info/?l=bugtraq&m=108448379429944&w=2

Vendor Advisory vendor-advisory x_refsource_mandrake

http://www.mandriva.com/security/advisories?name=MDKSA-2004:021

Vendor Advisory vendor-advisory x_refsource_sgi

ftp://patches.sgi.com/support/free/security/advisories/20040402-01-U.asc

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A914

Scores

EPSS 0.3648

EPSS Percentile 97.2%

Details

Status published

Products (2)

hitachi/groupmax_mail_-_security_option 6.0

hitachi/pki_runtime_library

Published Dec 01, 2003

Tracked Since Feb 18, 2026