Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
| Software | From | Fixed in |
|---|---|---|
| atrium_software / mercur_mailserver | 4.1 | 4.1.x |
| atrium_software / mercur_mailserver | 4.1_sp1 | 4.1_sp1.x |
| atrium_software / mercur_mailserver | 3.3 | 3.3.x |
| atrium_software / mercur_mailserver | 3.3_sp1 | 3.3_sp1.x |
| atrium_software / mercur_mailserver | 4.2 | 4.2.x |
| atrium_software / mercur_mailserver | 3.3_sp2 | 3.3_sp2.x |