CVE-2000-0320
MediumExploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
Qpopper versions 2.53 and 3.0 improperly identify the string that marks the end of message text. This allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in .
Risk Assessment
The organization may experience denial of service or mailbox corruption, potentially leading to data loss and communication disruption.
Recommendation
It is recommended to update Qpopper to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.