Sign-up

ID

VAR-199804-0007


CVE

CVE-1999-1015


TITLE

AppleShare IP Mail Server Buffer Overflow Vulnerability

Trust: 0.9

sources: BID: 61 // CNNVD: CNNVD-199804-018

DESCRIPTION

Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) via a long HELO command. apple's AppleShare Mail Server Exists in unspecified vulnerabilities.None. If yu connect to the SMTP port and issue a HELO command with a large string (500 bytes or more) for a hostname the server, and possibly the whole machine, will crash

Trust: 2.07

sources: NVD: CVE-1999-1015 // JVNDB: JVNDB-1998-000022 // BID: 61 // VULHUB: VHN-996 // VULMON: CVE-1999-1015

AFFECTED PRODUCTS

vendor:applemodel:appleshare mail serverscope:eqversion:5.0.3

Trust: 1.6

vendor:アップルmodel:appleshare mail serverscope:eqversion: -

Trust: 0.8

vendor:アップルmodel:appleshare mail serverscope:eqversion:5.0.3

Trust: 0.8

vendor:applemodel:appleshare ip mail serverscope:eqversion:5.0.3

Trust: 0.3

sources: BID: 61 // JVNDB: JVNDB-1998-000022 // CNNVD: CNNVD-199804-018 // NVD: CVE-1999-1015

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-1999-1015
value: MEDIUM

Trust: 1.0

NVD: CVE-1999-1015
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-199804-018
value: MEDIUM

Trust: 0.6

VULHUB: VHN-996
value: MEDIUM

Trust: 0.1

VULMON: CVE-1999-1015
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-1999-1015
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-996
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-996 // VULMON: CVE-1999-1015 // JVNDB: JVNDB-1998-000022 // CNNVD: CNNVD-199804-018 // NVD: CVE-1999-1015

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

problemtype:others (CWE-Other) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-1998-000022 // NVD: CVE-1999-1015

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-199804-018

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-199804-018

EXPLOIT AVAILABILITY

sources:
            
            
            VULHUB: VHN-996 // 
            
            
            
            VULMON: CVE-1999-1015

PATCH
title:AppleShare IP Mail Serverurl:https://marc.info/?l=bugtraq&m=89200657216213&w=2
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-1998-000022

EXTERNAL IDS
db:NVDid:CVE-1999-1015
Trust: 3.7
db:BIDid:61
Trust: 2.9
db:JVNDBid:JVNDB-1998-000022
Trust: 0.8
db:CNNVDid:CNNVD-199804-018
Trust: 0.7
db:BUGTRAQid:19980408 APPLESHARE IP MAIL SERVER
Trust: 0.6
db:EXPLOIT-DBid:19046
Trust: 0.2
db:VULHUBid:VHN-996
Trust: 0.1
db:VULMONid:CVE-1999-1015
Trust: 0.1
sources:
            
            
            VULHUB: VHN-996 // 
            
            
            
            VULMON: CVE-1999-1015 // 
            
            
            
            BID: 61 // 
            
            
            
            JVNDB: JVNDB-1998-000022 // 
            
            
            
            CNNVD: CNNVD-199804-018 // 
            
            
            
            NVD: CVE-1999-1015

REFERENCES
url:http://www.securityfocus.com/bid/61
Trust: 2.7
url:http://marc.info/?l=bugtraq&m=89200657216213&w=2
Trust: 1.1
url:https://nvd.nist.gov/vuln/detail/cve-1999-1015
Trust: 0.8
url:http://marc.theaimsgroup.com/?l=bugtraq&m=89200657216213&w=2
Trust: 0.6
url:http://marc.info/?l=bugtraq&m=89200657216213&w=2
Trust: 0.1
url:https://cwe.mitre.org/data/definitions/.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://www.exploit-db.com/exploits/19046/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-996 // 
            
            
            
            VULMON: CVE-1999-1015 // 
            
            
            
            JVNDB: JVNDB-1998-000022 // 
            
            
            
            CNNVD: CNNVD-199804-018 // 
            
            
            
            NVD: CVE-1999-1015

CREDITS
This vulnerability was published as "AppleShare IP Mail Server"  
by Chris Wedgwood <chris@cybernet.co.nz> in the
BugTraq mailing list on April 8, 1998.
Trust: 0.9
sources:
            
            
            BID: 61 // 
            
            
            
            CNNVD: CNNVD-199804-018

SOURCES
db:VULHUBid:VHN-996
db:VULMONid:CVE-1999-1015
db:BIDid:61
db:JVNDBid:JVNDB-1998-000022
db:CNNVDid:CNNVD-199804-018
db:NVDid:CVE-1999-1015

LAST UPDATE DATE
2024-08-14T15:45:54.780000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-996date:2017-11-21T00:00:00
db:VULMONid:CVE-1999-1015date:2017-11-21T00:00:00
db:BIDid:61date:2009-07-11T00:16:00
db:JVNDBid:JVNDB-1998-000022date:2024-05-13T09:06:00
db:CNNVDid:CNNVD-199804-018date:2005-10-20T00:00:00
db:NVDid:CVE-1999-1015date:2017-11-21T19:16:30.237

SOURCES RELEASE DATE
db:VULHUBid:VHN-996date:1998-04-08T00:00:00
db:VULMONid:CVE-1999-1015date:1998-04-08T00:00:00
db:BIDid:61date:1998-04-07T00:00:00
db:JVNDBid:JVNDB-1998-000022date:2024-05-13T00:00:00
db:CNNVDid:CNNVD-199804-018date:1998-04-08T00:00:00
db:NVDid:CVE-1999-1015date:1998-04-08T04:00:00