CVE-2000-0239: Atrium Software Mercur IMAP4 Server

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request.

Affected products

• Atrium Software Mercur IMAP4 Server: version 3.20.01 only
• Atrium Software Mercur Mailserver: version 3.2 only
• Atrium Software Mercur POP3 Server: version 3.20.01 only

Published 2000-03-15. Last modified 2026-06-16.