The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.

Numerous security fixes are available in Mozilla 1.0.1. For a detailed list, refer to the 'Recently fixed security issues' page on the Mozilla website (see the first reference). All users are encouraged to upgrade to this latest stable 1.0.x release of Mozilla.

The remote host is using the Netscape web browser, which has the ability to act as a mail client. A vulnerability exists in the remote version that may allow an attacker to send a malformed email that will make Netscape crash each time it attempts to fetch it by POP3.

The remote host is using the Netscape web browser, which has the ability to act as a mail client. A vulnerability exists in the remote version that may allow an attacker to send a malformed email which will make Netscape crash each time it attempts to fetch it by POP3.

The remote host is using the Mozilla web browser, which has the ability to act as a mail client. A vulnerability exists in the remote version which may allow an attacker to send a malformed email which will make Mozilla crash each time it attempts to fetch it by POP3.

The remote host is running a version of the Mozilla browser that is vulnerable to a Denial of Service attack. Specifically, a malformed email message may prevent the client from accessing POP3 mailboxes. 

ID	Name	Product	Family	Severity
61919	Mandrake Linux Security Advisory : mozilla (MDKSA-2002:074)	Nessus	Mandriva Local Security Checks	high
1760	Netscape < 6.2.3 POP3 Client Malformed Email DoS	Nessus Network Monitor	Web Clients	medium
1759	Netscape < 4.78 POP3 Client Malformed Email DoS	Nessus Network Monitor	Web Clients	medium
1758	Mozilla Firefox < 1.1 POP3 Client Malformed Email DoS	Nessus Network Monitor	Web Clients	medium
1312	Netscape/Mozilla Malformed Email Newline POP3 Remote DoS (deprecated)	Nessus Network Monitor	SMTP Clients	medium

Detections

Analytics

CVE-2002-2338

high

Tenable Plugins

high

medium

medium

medium

medium