Vulnerability Report

CVE-2003-0487

Title: Kerio Kerio Mailserver RCE

Memory Corruption

Proof Of Concept

PoC Available for CVE-2003-0487

CWE Category NVD-CWE-noinfo
Published Date Aug 07, 2003
Modified Date Jun 16, 2026
Exploit Status Available
Score 7.5 CVSS v2.0
Exploit Probability (EPSS)
11.37%

Vulnerability Summary

CVE-2003-0487: Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.

Impacted Vendors

K
kerio 1

Reference Links

http://marc.info/?l=bugtraq&m=105596982503760&w=2 http://nautopia.org/vulnerabilidades/kerio_mailserver.htm http://www.securityfocus.com/bid/7967 https://exchange.xforce.ibmcloud.com/vulnerabilities/12368 http://marc.info/?l=bugtraq&m=105596982503760&w=2 http://nautopia.org/vulnerabilidades/kerio_mailserver.htm http://www.securityfocus.com/bid/7967 https://exchange.xforce.ibmcloud.com/vulnerabilities/12368
CVSS v2.0
Source Entity [email protected]
Severity HIGH
7.5
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2003-0487 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/22801
View Code
Exploit-DB https://www.exploit-db.com/exploits/22803
View Code
Exploit-DB https://www.exploit-db.com/exploits/22802
View Code
Exploit-DB https://www.exploit-db.com/exploits/22800
View Code
Exploit-DB https://www.exploit-db.com/exploits/46
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.