Atrium Software Mercur Mailserver — known CVE vulnerabilities

Every CVE whose affected-product data names Atrium Software Mercur Mailserver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2003-1322 — CVSS 10.0 (critical): Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute…
• CVE-2000-0318 — CVSS 7.5 (high): Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
• CVE-2002-1073 — CVSS 7.5 (high): Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
• CVE-2003-1177 — CVSS 7.5 (high): Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and…
• CVE-2000-0198 — CVSS 5.0 (medium): Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
• CVE-2000-0239 — CVSS 5.0 (medium): Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in…