Multiple buffer overflows exist in Mercury/32, version 4.01a, Dec 8 2003. There are 14 vulnerable commands that can be used to cause buffer overflows to occur. After a successful login to the mail server, if any of these commands are used with an overly long argument the application closes resulting in a denial of service.
3586a9a2da3960faf75dfa1bd395a4b043a451a29c220d2da63b7d880c6776b9
Universal remote exploit for the buffer overflow vulnerability in Mercury Mail 4.01 (Pegasus) IMAP server.
1992e2ec6ee91bec2e209f5d8942e15e93e225cd81bc0a56fc5540e11094d323