CVE-2014-3891
UnknownEPSS 2.04%
Last modified
CVE-2014-3891 is a vulnerability of currently unknown severity. Buffer overflow in RimArts Becky! Internet Mail before 2.68 allows remote POP3 servers to execute arbitrary code via a crafted response.. EPSS estimates a 2.04% chance of exploitation in the next 30 days.
Description
Buffer overflow in RimArts Becky! Internet Mail before 2.68 allows remote POP3 servers to execute arbitrary code via a crafted response.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Rimarts | Becky\! Internet Mail | <= 2.67 |
| Rimarts | Becky\! Internet Mail | 1.26.3 |
| Rimarts | Becky\! Internet Mail | 1.26.4 |
| Rimarts | Becky\! Internet Mail | 1.26.5 |
| Rimarts | Becky\! Internet Mail | 2.00.0 |
| Rimarts | Becky\! Internet Mail | 2.00.01 |
| Rimarts | Becky\! Internet Mail | 2.00.02 |
| Rimarts | Becky\! Internet Mail | 2.00.03 |
| Rimarts | Becky\! Internet Mail | 2.0.3 |
| Rimarts | Becky\! Internet Mail | 2.00.04 |
| Rimarts | Becky\! Internet Mail | 2.0.5 |
| Rimarts | Becky\! Internet Mail | 2.00.05 |
| Rimarts | Becky\! Internet Mail | 2.00.06 |
| Rimarts | Becky\! Internet Mail | 2.00.07 |
| Rimarts | Becky\! Internet Mail | 2.00.08 |
| Rimarts | Becky\! Internet Mail | 2.00.09 |
| Rimarts | Becky\! Internet Mail | 2.00.10 |
| Rimarts | Becky\! Internet Mail | 2.00.11 |
| Rimarts | Becky\! Internet Mail | 2.05.00 |
| Rimarts | Becky\! Internet Mail | 2.05.01 |
| Rimarts | Becky\! Internet Mail | 2.05.02 |
| Rimarts | Becky\! Internet Mail | 2.05.03 |
| Rimarts | Becky\! Internet Mail | 2.05.04 |
| Rimarts | Becky\! Internet Mail | 2.05.05 |
| Rimarts | Becky\! Internet Mail | 2.05.06 |
| Rimarts | Becky\! Internet Mail | 2.05.07 |
| Rimarts | Becky\! Internet Mail | 2.05.08 |
| Rimarts | Becky\! Internet Mail | 2.05.09 |
| Rimarts | Becky\! Internet Mail | 2.05.10 |
| Rimarts | Becky\! Internet Mail | 2.05.11 |
| Rimarts | Becky\! Internet Mail | 2.06 |
| Rimarts | Becky\! Internet Mail | 2.06.02 |
| Rimarts | Becky\! Internet Mail | 2.07 |
| Rimarts | Becky\! Internet Mail | 2.07.01 |
| Rimarts | Becky\! Internet Mail | 2.07.02 |
| Rimarts | Becky\! Internet Mail | 2.07.03 |
| Rimarts | Becky\! Internet Mail | 2.07.04 |
| Rimarts | Becky\! Internet Mail | 2.08 |
| Rimarts | Becky\! Internet Mail | 2.08.01 |
| Rimarts | Becky\! Internet Mail | 2.09 |
| Rimarts | Becky\! Internet Mail | 2.09.01 |
| Rimarts | Becky\! Internet Mail | 2.10 |
| Rimarts | Becky\! Internet Mail | 2.10.01 |
| Rimarts | Becky\! Internet Mail | 2.10.02 |
| Rimarts | Becky\! Internet Mail | 2.10.03 |
| Rimarts | Becky\! Internet Mail | 2.10.04 |
| Rimarts | Becky\! Internet Mail | 2.11 |
| Rimarts | Becky\! Internet Mail | 2.11.01 |
| Rimarts | Becky\! Internet Mail | 2.11.02 |
| Rimarts | Becky\! Internet Mail | 2.12 |
Showing 50 of 160 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-3891?
Buffer overflow in RimArts Becky! Internet Mail before 2.68 allows remote POP3 servers to execute arbitrary code via a crafted response.
How severe is CVE-2014-3891?
Severity scoring for CVE-2014-3891 is pending analysis. The EPSS model estimates a 2.04% probability of exploitation in the next 30 days.
How do I fix CVE-2014-3891?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-3885Cross-site scripting (XSS) vulnerability in Webmin before 1.…
- CVE-2014-3886Cross-site scripting (XSS) vulnerability in Webmin before 1.…
- CVE-2014-3887Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE …
- CVE-2014-3888Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa C…
- CVE-2014-3889silex SX-2000WG devices with firmware before 1.5.4 allow rem…
- CVE-2014-3890silex SX-2000WG devices with firmware before 1.5.4 allow rem…
- CVE-2014-3892Cross-site scripting (XSS) vulnerability in Nexa Meridian be…
- CVE-2014-3893Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-3894Cross-site scripting (XSS) vulnerability in PHP Kobo Multifu…
- CVE-2014-3895The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier,…
- CVE-2014-3896Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2014-3897Cross-site scripting (XSS) vulnerability in Homepage Decorat…
Are you affected by CVE-2014-3891?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
