CVE-2002-0379: university_of_washington uw-imap
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2002-0379 is a high (CVSS 7.5) vulnerability in university_of_washington uw-imap. EPSS estimates a 19.35% chance of exploitation in the next 30 days, higher than 97.3% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 02-04-2003PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
19.35%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 19.35% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundWU-IMAPd 2000/2001 - Partial Mailbox Attribute Remote Buffer Overflow (1)
Maturity: weaponized
WU-IMAPd 2000/2001 - Partial Mailbox Attribute Remote Buffer Overflow (2)
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
University_of_washington1 product
- uw-imap2000.283 | 2000.284 | 2000.287 | 2000.315
1 vendor · 1 product
References
11 links- www.washington.edu/imap/buffer.htmlX Refsource CONFIRM