← Database

CVE-2007-4440

HIGH CVSS: 7.5 Published: 2007-08-21 Modified: 2026-06-16

Description

Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961.

Affected Platforms

Pmail Mercury Mail Transport System

Weakness Type

CWE-119

References