CVE-2003-0143

The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

8.60% chance of exploitation in the next 30 days, 95th percentile

Published

2004-09-01

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/22342

References

• CVE Record
• NVD entry

Related

• CVE-2003-0132
• CVE-2003-0144
• CVE-2003-0130
• CVE-2003-0150
• CVE-2003-0129
• CVE-2003-0153