Vulnerability in Pop3lite
CVE-2001-0996
POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to crash or otherwise behave unexpectedly.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.4 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.017 (76.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 76th percentile — 76.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000
Affected products
- Pop3lite — versions 0.2.3, 0.2.3b
References
- exchange.xforce.ibmcloud.com/vulnerabilities/7075 (vdb-entry)
- www.securityfocus.com/bid/3278 (Exploit, Patch, vdb-entry, Vendor Advisory)
- archives.neohapsis.com/archives/bugtraq/2001-08/0436.html (Vendor Advisory, mailing-list)