CVE-2002-2253: Buffer Overflow
Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2253?
CVE-2002-2253 is classified as a critical vulnerability due to its ability to allow remote code execution.
How do I fix CVE-2002-2253?
To fix CVE-2002-2253, update to a version of Cyrus Sieve / libSieve that is later than 2.1.2.
What types of attacks are possible with CVE-2002-2253?
CVE-2002-2253 allows attackers to exploit buffer overflows through long header names, long IMAP flags, or error script overflows.
Which versions of Cyrus Sieve are affected by CVE-2002-2253?
CVE-2002-2253 affects Cyrus Sieve / libSieve versions up to and including 2.1.2.
Who is at risk of CVE-2002-2253?
Systems running affected versions of Cyrus Sieve / libSieve are at risk from this vulnerability, especially when exposed to untrusted inputs.