CVE-2002-0914

5 documents5 sources
Severity
5.0MEDIUM
EPSS
0.8%
top 26.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Double Precision Incorporated Courier MTA
Timeline
PublishedOct 4
Latest updateApr 30

Description

Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶Debiancourier< 0.46+3

Patches

Patch: www.iss.net ↗Patch: www.iss.net ↗

🔴Vulnerability Details

3
GHSA
GHSA-2fx9-2g54-566x: Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or ne↗2022-04-30
▶
CVEList
CVE-2002-0914: Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or ne↗2003-04-02
▶
OSV
CVE-2002-0914: Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or ne↗2002-10-04
▶

📋Vendor Advisories

1
Debian
CVE-2002-0914: courier - Double Precision Courier e-mail MTA allows remote attackers to cause a denial of...↗2002
▶
CVE-2002-0914 (MEDIUM CVSS 5) | Double Precision Courier e-mail MTA | cvebase.io