NVD

Id
73290  
Name
CVE-2003-0143  
Description
The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2003-03-18  
Modified Date
2016-10-17  
Seq
2003-0143  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
377474 73290 CVE-2003-0143 20030310 QPopper 4.0.x buffer overflow vulnerability  View
377475 73290 CVE-2003-0143 20030312 Re: QPopper 4.0.x buffer overflow vulnerability  View
377476 73290 CVE-2003-0143 20030314 [OpenPKG-SA-2003.018] OpenPKG Security Advisory (qpopper)  View
377477 73290 CVE-2003-0143 GLSA-200303-12  View
377478 73290 CVE-2003-0143 DSA-259  View
377479 73290 CVE-2003-0143 SuSE-SA:2003:018  View
377480 73290 CVE-2003-0143 7058  View
377481 73290 CVE-2003-0143 qpopper-popmsg-macroname-bo(11516)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63347 JVNDB-2003-000073 Qpopper の qvsnprintf() 関数におけるフォーマットストリングの脆弱性 Qpopper には、文字列のコピーが行われる際に呼び出される qvsnprintf() 関数内で文字列が NULL で終端している場合の取り扱いの不備により、フォーマットストリングの脆弱性が存在します。 CVE-2003-0143 6971 CVE-2003-0143 73290 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000073.html 2003-03-10 2007-04-01 View