Skip to content
Fencer Vulns
high 7.5

CVE-2000-0284 in the critical feed json

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other comma…

published 2000-04-16 26 y ago modified 2026-06-16 4 mo ago also EUVD-2000-0283

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
68.3%
EPSS 68.3% chance of exploitation in 30 days, percentile 99.3%
public exploits
9
Metasploit, Exploit-DB

Summary

Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.

Timeline

  1. First public exploit (Metasploit exploit/linux/imap/imap_uw_lsub)
  2. Published

Exploit prediction

68.28% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • Metasploit exploit/linux/imap/imap_uw_lsub UoW IMAP Server LSUB Buffer Overflow metasploit exploit, good rank, 2000-04-16
  • EDB-19849 UoW IMAPd Serve 10.234/12.264 - COPY Buffer Overflow (Metasploit) remote, 2000-04-16
  • EDB-19848 UoW IMAPd Server 10.234/12.264 - LSUB Buffer Overflow (Metasploit) remote, 2000-04-16
  • EDB-19847 UoW IMAPd Server 10.234/12.264 - Remote Buffer Overflow remote, 2002-08-01
  • EDB-16846 UoW IMAPd Server - LSUB Buffer Overflow (Metasploit) remote, 2010-03-26
  • EDB-10025 University of Washington - imap LSUB Buffer Overflow (Metasploit) remote, 2000-04-16
  • EDB-397 WU-IMAP 2000.287(1-2) - Remote Overflow remote, 2002-06-25
  • EDB-284 IMAP4rev1 12.261/12.264/2000.284 - 'lsub' Remote Overflow remote, 2001-03-03
  • EDB-253 IMAP4rev1 10.190 - Authentication Stack Overflow remote, 2001-01-19

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.