Skip to content

CVE-2003-1192

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute...

10.0 HighPublic exploit

CVE-2003-1192 is a high vulnerability (CVSS 10.0) in Truenorth Software Ia Webmail Server, published November 3, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 69.2%, the 99th percentile. No source names a fixed version.

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.

Exploit likelihood

69.2%Down 8.4 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.

Record: CVE-2003-1192
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.

Record: CVE-2003-1192
Updated: 2026-11-02

EUVDEUVD-2003-1182 No score

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.

Record: EUVD-2003-1182
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qq49-j83g-27m9 No score

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute...

Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.

Record: GHSA-qq49-j83g-27m9
Updated: 2026-11-02

Affected products

truenorth software ia webmail server

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	IA WebMail Server 3.x - 'iaregdll.dll 1.0.0.5' Remote Overflow	2003-11-19
Exploit-DB	IA WebMail Server 3.x - Remote Buffer Overflow (Metasploit)	2010-05-09
Exploit-DB	IA WebMail Server 3.0/3.1 - GET Buffer Overrun	2003-11-03
Metasploit	IA WebMail 3.x Buffer Overflow	2003-11-03

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

References

Show 4 moreShow less