CVE-2001-0996

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-09-02 · updated 2026-06-16

Description

POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to crash or otherwise behave unexpectedly.

Affected products

Pop3Lite: 0.2.3, 0.2.3b

References

http://archives.neohapsis.com/archives/bugtraq/2001-08/0436.html
http://www.securityfocus.com/bid/3278
https://exchange.xforce.ibmcloud.com/vulnerabilities/7075
http://archives.neohapsis.com/archives/bugtraq/2001-08/0436.html
http://www.securityfocus.com/bid/3278
https://exchange.xforce.ibmcloud.com/vulnerabilities/7075

Get alerted when CVE-2001-0996 or the next vulnerability affects your stack