5

CVE-2003-0564

Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.64% 0.938
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.mandriva.com/security/advisories?name=MDKSA-2004:021
ftp://patches.sgi.com/support/free/security/advisories/20040402-01-U.asc
http://marc.info/?l=bugtraq&m=108448379429944&w=2
http://marc.info/?l=bugtraq&m=109900315219363&w=2
http://www.kb.cert.org/vuls/id/428230
Third Party Advisory
US Government Resource
http://www.redhat.com/support/errata/RHSA-2004-110.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-112.html
http://www.securityfocus.com/bid/8981
Vendor Advisory
http://www.uniras.gov.uk/vuls/2003/006489/smime.htm
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13603
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11462
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A872
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A914