CVE-2003-0297
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers...
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
Exploit likelihood
What each source reports
NVD Score used
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
- Record
CVE-2003-0297- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
- Record
CVE-2003-0297- Updated
- 2026-11-02
EUVDEUVD-2003-0292 No score
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
- Record
EUVD-2003-0292- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-22ph-2jjc-cggf No score
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers...
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
- Record
GHSA-22ph-2jjc-cggf- Updated
- 2026-11-02
OSV No score
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
- Record
CVE-2003-0297- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0297 No score
c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.
- Record
DEBIAN-CVE-2003-0297- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
uw-imapDebian:12 |
before 7:2002c | 7:2002c |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0297 is a high vulnerability (CVSS 7.5) in University Of Washington C-client, published May 15, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.74%, the 86th percentile. Fixed in uw-imap 7:2002c.
References
securityfocus.com/archive/1/430302/100/0/threaded
redhat.com/support/errata/RHSA-2005-114.html
marc.info?l=bugtraq&m=105294024124163&w=2
nvd.nist.gov/vuln/detail/CVE-2003-0297
github.com/advisories/GHSA-22ph-2jjc-cggf
security-tracker.debian.org/tracker/CVE-2003-0297