CVE-2002-2198: Zmailer

High severity, CVSS 10.0. EPSS: 6.2% chance of exploitation in the next 30 days.

Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname.

Affected products

• Zmailer Zmailer: version 2.99.45 only; version 2.99.46 only; version 2.99.47 only; version 2.99.48 only; version 2.99.49 only; version 2.99.50 only; …

Published 2002-12-31. Last modified 2026-06-16.