5

CVE-2002-2338

Exploit

The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.

Data is provided by the National Vulnerability Database (NVD)
MozillaMozilla Version0.9.2
MozillaMozilla Version0.9.2.1
MozillaMozilla Version0.9.3
MozillaMozilla Version0.9.4
MozillaMozilla Version0.9.4.1
MozillaMozilla Version0.9.5
MozillaMozilla Version0.9.6
MozillaMozilla Version0.9.7
MozillaMozilla Version0.9.8
MozillaMozilla Version0.9.9
MozillaMozilla Version1.0
MozillaMozilla Version1.0 Updaterc1
MozillaMozilla Version1.0 Updaterc2
NetscapeCommunicator Version4.0
NetscapeCommunicator Version4.4
NetscapeCommunicator Version4.5
NetscapeCommunicator Version4.06
NetscapeCommunicator Version4.6
NetscapeCommunicator Version4.07
NetscapeCommunicator Version4.7
NetscapeCommunicator Version4.08
NetscapeCommunicator Version4.51
NetscapeCommunicator Version4.61
NetscapeCommunicator Version4.72
NetscapeCommunicator Version4.73
NetscapeCommunicator Version4.74
NetscapeCommunicator Version4.75
NetscapeCommunicator Version4.76
NetscapeCommunicator Version4.77
NetscapeNavigator Version6.0
NetscapeNavigator Version6.0 Editionmac
NetscapeNavigator Version6.01
NetscapeNavigator Version6.1
NetscapeNavigator Version6.2
NetscapeNavigator Version6.2.1
NetscapeNavigator Version6.2.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 7.42% 0.913
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.