CVE-2003-1322: Atrium Software Mercur Mailserver

High severity, CVSS 10.0. EPSS: 5.7% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrary code via a long (1) EXAMINE, (2) DELETE, (3) SUBSCRIBE, (4) RENAME, (5) UNSUBSCRIBE, (6) LIST, (7) LSUB, (8) STATUS, (9) LOGIN, (10) CREATE, or (11) SELECT command.

Affected products

• Atrium Software Mercur Mailserver: up to and including 4.2

Published 2003-12-31. Last modified 2026-06-16.