Lucene search
HistoryOct 14, 2007 - 8:00 p.m.
CVE-2002-2253
cyrus sieve
libsieve
buffer overflow
remote code execution
cve-2002-2253
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.081 Low
EPSS
Percentile
94.3%
Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string.
Affected configurations
Node
cyruslibsieveRange≤2.1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| cyrus:libsieve | cyrus libsieve | le | 2.1.2 |
References
Related
cvelist
cvelist
CVE-2002-2253
2007-10-14 20:00:00
nvd
nvd
CVE-2002-2253
2002-12-31 05:00:00
debiancve
debiancve
CVE-2002-2253
2007-10-14 20:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.081 Low
EPSS
Percentile
94.3%
Related for CVE-2002-2253