CVE-2003-0487

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-08-07 · updated 2026-06-16

Description

Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.

Affected products

Kerio Mailserver: 5.6.3

References

http://marc.info/?l=bugtraq&m=105596982503760&w=2
http://nautopia.org/vulnerabilidades/kerio_mailserver.htm
http://www.securityfocus.com/bid/7967
https://exchange.xforce.ibmcloud.com/vulnerabilities/12368
http://marc.info/?l=bugtraq&m=105596982503760&w=2
http://nautopia.org/vulnerabilidades/kerio_mailserver.htm
http://www.securityfocus.com/bid/7967
https://exchange.xforce.ibmcloud.com/vulnerabilities/12368

Get alerted when CVE-2003-0487 or the next vulnerability affects your stack