CVE-2003-0057: Hypermail

High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days.

Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename that is not properly handled by the hypermail executable, or (2) by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname.

Affected products

• Hypermail Hypermail: version 2.0b25 only; version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; version 2.1.4 only; version 2.1.5 only; …

Published 2003-02-19. Last modified 2026-06-16.