CVE-2002-1073
Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to...
CVE-2002-1073 is a high vulnerability (CVSS 7.5) in Atrium Software Mercur Mailserver, published August 31, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.73%, the 93rd percentile. No source names a fixed version.
Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
- Record
CVE-2002-1073- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
- Record
CVE-2002-1073- Updated
- 2026-11-02
EUVDEUVD-2002-1062 No score
Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
- Record
EUVD-2002-1062- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6fq3-j78p-69pv No score
Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to...
Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
- Record
GHSA-6fq3-j78p-69pv- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | 3.3/4.0/4.2 MERCUR MailServer - Control-Service Buffer Overflow | 2002-07-16 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |