CVE-2001-0280

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
May 3, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-02817.2Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessCVE-2001-028210.0SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.CVE-2001-02836.4Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various cCVE-2001-028410.0Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possiCVE-2001-028510.0Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a loCVE-2001-02865.0Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET rCVE-2001-02872.1VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstaCVE-2001-02887.5Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackeCVE-2001-02894.6Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain prCVE-2001-02904.6Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.CVE-2001-029110.0Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that containCVE-2001-02927.5PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling u
CVE-2001-0280: Critical severity, CVSS 10.0 | Vulnix