CVE-2002-1721: High severity Paul L Daniels Altermime vulnerability
Published Dec 31, 2002
·Updated
Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGETFILE variable with a (null) byte.
Affected Software
4 affected components
Paul L Daniels Altermime=0.1.10
Paul L Daniels Altermime=0.1.11
Pldaniels Altermime=0.1.10
Pldaniels Altermime=0.1.11
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Jun 21, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1721?
CVE-2002-1721 is classified as a denial of service vulnerability due to an off-by-one error.
2
How can I fix CVE-2002-1721?
To mitigate CVE-2002-1721, upgrade to alterMIME version 0.1.12 or later, where the issue has been resolved.
3
What versions are affected by CVE-2002-1721?
CVE-2002-1721 affects alterMIME versions 0.1.10 and 0.1.11.
4
What impact does CVE-2002-1721 have?
CVE-2002-1721 can cause a crash in alterMIME, leading to a denial of service.
5
Is CVE-2002-1721 exploitable remotely?
Yes, CVE-2002-1721 can be exploited remotely through specially crafted x-headers.