CVE-2000-0284

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Apr 16, 2000
Updated: Nov 20, 2024

Summary

CVE-2000-0284 is a buffer overflow vulnerability affecting the University of Washington's imapd version 4.7. This issue allows users with valid accounts to execute arbitrary commands, including the LIST command, by exploiting a buffer overflow weakness. Successful exploitation of this vulnerability could result in unauthorized access or system compromise. Users are advised to upgrade to a patched version of imapd to mitigate this risk. Additionally, attackers can potentially gain unauthorized access to mailboxes and execute arbitrary commands on the affected system. The vulnerability arises due to insufficient bounds checking in the handling of certain IMAP commands, leading to a buffer overflow condition. This issue can pose a significant threat to organizations and individuals using the affected version of imapd.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share