CVE-2002-2325

Published Dec 31, 2002

Last updated 16 years ago

Overview

Description: The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service (client crash) via a MIME-encoded email with Content-Type header containing an empty boundary field.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.8
Impact score: 6.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:university_of_washington:pine:4.20:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "16766308-A2F2-4155-A4F7-702808CC9450"
          },
          {
            "criteria": "cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AA9E599F-D922-42B7-9FB5-FB025B095895"
          },
          {
            "criteria": "cpe:2.3:a:university_of_washington:pine:4.30:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9F7C068F-1664-4022-B88D-E486EEDD501C"
          },
          {
            "criteria": "cpe:2.3:a:university_of_washington:pine:4.33:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3F37B4B-C812-46AD-A23B-3FE60D31587D"
          },
          {
            "criteria": "cpe:2.3:a:university_of_washington:pine:4.44:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8E10453B-C2A8-4203-B8D1-C77D00DE4315"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References