Vulnerability record · CVE-2002-0914 · published 4 October 2002

CVE-2002-0914: Double precision incorporated courier mta vulnerability

DDouble Precision Incorporated · Courier Mta

Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop.

5.0 CVSS 2.0 Medium EPSS 1.7% · top 24.1%

5.0CVSS 2.0 base score

1.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

DCourier Mta Double Precision Incorporated

References

Link	Tags
http://sourceforge.net/project/shownotes.php?release_id=93065
http://www.iss.net/security_center/static/9228.php	PatchVendor Advisory
http://www.osvdb.org/5052
http://www.securityfocus.com/bid/4908	Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=93065
http://www.iss.net/security_center/static/9228.php	PatchVendor Advisory
http://www.osvdb.org/5052
http://www.securityfocus.com/bid/4908	Vendor Advisory

Track CVE-2002-0914 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2006-2659Double precision incorporated courier mta vulnerabilitylibs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames t…EPSS 2.4%30 May 2006 7.5CVE-2004-0224Double precision incorporated courier mta vulnerabilityMultiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may all…EPSS 3.3%15 Apr 2004 7.5CVE-2003-0040Double precision incorporated courier mta vulnerabilitySQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.EPSS 1.2%19 Feb 2003 4.6CVE-2002-1311Double precision incorporated courier mta vulnerabilityCourier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary file…EPSS 0.34%29 Nov 2002

Source: NIST National Vulnerability Database (record CVE-2002-0914), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.