The (1) FTP, (2) POP3, (3) SMTP, and (4) NNTP servers in EServer 2.92 through 2.97, and possibly 2.98, allow remote attackers to cause a de…

1. 2003-01-04 First public exploit (EDB-22124)
2. 2003-12-31 Published

3.94% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).

• EDB-22124 EType EServ 1.9x - NNTP Remote Denial of Service dos, 2003-01-04
• EDB-22123 EType EServ 2.9x - SMTP Remote Denial of Service dos, 2003-01-04
• EDB-22122 EType EServ 2.9x - POP3 Remote Denial of Service dos, 2003-01-04
• EDB-22121 EType EServ 2.9x - FTP Remote Denial of Service dos, 2003-01-04
• securityfocus.com http://www.securityfocus.com/bid/6519 referenced PoC, tagged "exploit" by a source, unverified
• archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2003-01/0022.html referenced PoC, tagged "exploit" by a source, unverified
• securityfocus.com http://www.securityfocus.com/bid/6521 referenced PoC, tagged "exploit" by a source, unverified
• securityfocus.com http://www.securityfocus.com/bid/6522 referenced PoC, tagged "exploit" by a source, unverified
• securityfocus.com http://www.securityfocus.com/bid/6520 referenced PoC, tagged "exploit" by a source, unverified

• securityfocus.com /bid/6519

  vdb-entry, exploit, patch

• archives.neohapsis.com /archives/bugtraq/2003-01/0022.html

  mailing-list, exploit, patch

• securityfocus.com /bid/6521

  vdb-entry, exploit, patch

• securityfocus.com /bid/6522

  vdb-entry, exploit, patch

• iss.net /security_center/static/10975.php

  vdb-entry, patch

• securityfocus.com /bid/6520

  vdb-entry, exploit, patch

• CVE List CVE-2003-1266
• NVD CVE-2003-1266

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.