CVE-2004-1211: Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause...

Security readout for executives and security teams

Mercury/32 4.01a’s IMAP service had multiple buffer overflow flaws. A logged-in IMAP user could send overly long command arguments, causing the mail service to crash and possibly run attacker-controlled code. This matters mainly for organizations still operating this old mail server version. Exposure appears limited to Mercury/32 4.01a systems with IMAP enabled and reachable by authenticated users. The supplied CVE metadata does not identify other affected versions or products. Treat as urgent only if Mercury/32 4.01a is still present. For confirmed deployments, prioritize containment and replacement because the issue can crash mail service and may allow code execution. Mitigation focus: Identify any Mercury/32 4.01a mail servers in production or archives.; Check vendor guidance and historical release notes for fixed Mercury/32 versions.; Restrict IMAP access to trusted networks where the service must remain online..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.