PatchTheCVECVE-2003-1322: Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote
CVE-2003-1322 is a high-severity flaw (CVSS 10.0) affecting mercur mailserver. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long (1) EXAMINE, (2) DELETE, (3) SUBSCRIBE, (4) RENAME, (5) UNSUBSCRIBE, (6) LIST, (7) LSUB, (8) STATUS, (9) LOGIN, (10) CREATE, or (11) SELECT command.
Why this priority
- Critical severity
- EPSS top 7%: very likely to be exploited
A fixed release or distro patch exists.
Risk facts
| CVSS score | 10.0 (High) |
| EPSS exploit chance | 5.8% (top 7%) |
| CISA exploited list | No |
| Published | 2003-12-31 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2003-1322?
mercur mailserver: upgrade to newer than 4.2. Exact commands for each OS are on this page.
Is CVE-2003-1322 being exploited?
CVE-2003-1322 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2003-1322 affect?
CVE-2003-1322 affects mercur mailserver. Severity is high (CVSS 10.0). Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long (1) EXAMINE, (2) DELETE, (3) SUBSCRIBE, (4) RENAME, (5) UNSUBSCRIBE, (6) LIST, (7)
How urgent is CVE-2003-1322?
Priority 58/100. Critical severity; EPSS top 7%: very likely to be exploited
Related CVEs
- CVE-2003-1177 HIGH 7.5 DOWNGRADE Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a
- CVE-2002-1073 HIGH 7.5 DOWNGRADE Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary
- CVE-2000-0318 HIGH 7.5 DOWNGRADE Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via
- CVE-2000-0239 MEDIUM 5.0 DOWNGRADE DOWNGRADE Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via
- CVE-2000-0198 MEDIUM 5.0 DOWNGRADE DOWNGRADE Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a de