CVE-2003-0057

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename that is not properly handled by the hypermail executable, or (2) by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 19, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-00585.0MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDC CVE-2003-00597.5Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate CVE-2003-00607.5Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers CVE-2003-00617.2Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environmen CVE-2003-00627.2Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long path name.CVE-2003-00637.3The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence CVE-2003-00647.5The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to CVE-2003-00657.5The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to CVE-2003-00667.5The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then in CVE-2003-00677.5The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back CVE-2003-00687.5The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then i CVE-2003-00697.5The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back