5
CVE-2002-2338
- EPSS 3.88%
- Veröffentlicht 31.12.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:01:07
- Erkennungen
LoginThe POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netscape ≫ Communicator Version 4.0
Netscape ≫ Communicator Version 4.4
Netscape ≫ Communicator Version 4.5
Netscape ≫ Communicator Version 4.06
Netscape ≫ Communicator Version 4.6
Netscape ≫ Communicator Version 4.07
Netscape ≫ Communicator Version 4.7
Netscape ≫ Communicator Version 4.08
Netscape ≫ Communicator Version 4.51
Netscape ≫ Communicator Version 4.61
Netscape ≫ Communicator Version 4.72
Netscape ≫ Communicator Version 4.73
Netscape ≫ Communicator Version 4.74
Netscape ≫ Communicator Version 4.75
Netscape ≫ Communicator Version 4.76
Netscape ≫ Communicator Version 4.77
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.88% | 0.889 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074
http://bugzilla.mozilla.org/show_bug.cgi?id=144228
http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html
http://online.securityfocus.com/archive/1/276628
http://www.iss.net/security_center/static/9343.php
http://www.securityfocus.com/archive/1/276946
http://www.securityfocus.com/bid/5002