CVE-2002-2338

CVE-2002-2338 describes a denial-of-service vulnerability affecting the POP3 mail clients in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier. A remote attacker can exploit this by sending a specially crafted email containing a lone dot on a new line, which the client misinterprets as the end of the message, preventing the user from receiving subsequent emails. This vulnerability has a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P), indicating a low-complexity attack that can be executed remotely without authentication, leading to a partial denial of service. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, and the CVE has garnered significant community discussion, suggesting awareness and potential for exploitation despite its age.