CVE-2002-2253

Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string.

Scoring

CVSS base score
0.72
EPSS probability
14.39%
Published
2007-10-14
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs