David Harris

10 CVEs across 5 David Harris products. Browse David Harris vulnerabilities, severities, and proof-of-concept exploits.

David Harris products with known CVEs

ProductCVEs
Pegasus Mail6
Mercury1
Mercury 321
Mercury Mail Transport System1
Mercury Nlm1
David Harris CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-50182007-09-20Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command…
CVE-2005-44452005-12-21Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via a long email message header, which trigg…
CVE-2005-44442005-12-21Stack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allow remote attackers to execute arbitrary code…
CVE-2005-44112005-12-20Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.
CVE-2004-12112005-01-10Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibl…
CVE-2002-10752002-10-04Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via lo…
CVE-2001-04422001-06-27Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary cod…
CVE-2000-09312000-12-19Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message cont…
CVE-2000-09302000-12-19Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.
CVE-1999-13661999-05-15Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwo…