CVE-2003-1471

MDaemon <= 6.0.7 - Authenticated Denial of Service via Negative DELE or UIDL Command

Title source: llm

Description

MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/11882

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2003-04/0359.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/7445

Various Sources mailing-list x_refsource_bugtraq

http://archive.cert.uni-stuttgart.de/bugtraq/2003/04/msg00364.html

Scores

EPSS 0.0110

EPSS Percentile 61.8%

Details

CWE

CWE-20

Status published

Products (1)

alt-n/mdaemon < 6.0.7

Published Dec 31, 2003

Tracked Since Feb 18, 2026