CVE-2003-1177
CVE-2003-1177 is a high-severity vulnerability in Atrium Software Mercur Mailserver with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 13% places it in the 96th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: High (CVSS 2.0 base score 7.5)
- EPSS exploit prediction: 13% (96th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Atrium Software Mercur Mailserver
- Published:
- Last modified:
Description
Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the POP3 server or (2) AUTHENTICATE command to the IMAP server.
Frequently asked questions
- What is CVE-2003-1177?
- Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the POP3 server or (2) AUTHENTICATE command to the IMAP server.
- How severe is CVE-2003-1177?
- CVE-2003-1177 has a CVSS 2.0 base score of 7.5, rated high severity.
- Is CVE-2003-1177 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 13% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2003-1177?
- CVE-2003-1177 primarily affects Atrium Software Mercur Mailserver. In total, 8 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2003-1177?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2003-1177 published?
- CVE-2003-1177 was published on 2003-12-31 and last updated on 2026-06-16.
References
- http://archives.neohapsis.com/archives/fulldisclosure/2003-q4/1459.html
- http://secunia.com/advisories/10038
- http://www.atrium-software.com/mail%20server/pub/mcr42sp3a.html
- http://www.osvdb.org/2688
- http://www.securiteam.com/windowsntfocus/6U00N1P8KC.html
- http://www.securityfocus.com/bid/8861
- http://www.securityfocus.com/bid/8889
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13468
Affected products (8)
- cpe:2.3:a:atrium_software:mercur_mailserver:3.3:*:*:*:*:*:*:*
- cpe:2.3:a:atrium_software:mercur_mailserver:3.3_sp1:*:*:*:*:*:*:*
- cpe:2.3:a:atrium_software:mercur_mailserver:3.3_sp2:*:*:*:*:*:*:*
- cpe:2.3:a:atrium_software:mercur_mailserver:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:atrium_software:mercur_mailserver:4.1_sp1:*:*:*:*:*:*:*
- cpe:2.3:a:atrium_software:mercur_mailserver:4.2:*:*:*:*:*:*:*
- cpe:2.3:a:atrium_software:mercur_mailserver:4.2_sp1:*:*:*:*:*:*:*
- cpe:2.3:a:atrium_software:mercur_mailserver:4.2_sp2:*:*:*:*:*:*:*
More vulnerabilities in Atrium Software Mercur Mailserver
- CVE-2003-1322 — Critical (CVSS 10.0): Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote…
- CVE-2002-1073 — High (CVSS 7.5): Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via…
- CVE-2000-0318 — High (CVSS 7.5): Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot…
- CVE-2000-0239 — Medium (CVSS 5.0): Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long…
- CVE-2000-0198 — Medium (CVSS 5.0): Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of…