CVE-2003-0274: Cren Listproc

High severity, CVSS 10.0. EPSS: 5.5% chance of exploitation in the next 30 days.

Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value.

Affected products

• Cren Listproc: version 8.2.9 only

Published 2003-05-27. Last modified 2026-06-16.