vulnwire
7.5high

CVE-2003-0264in critical feed4 exploits

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
71.9%
percentile 99%
Public exploits
4
Exploit-DB

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO argument to slmail.exe, (2) a long XTRN argument to slmail.exe, (3) a long string to POPPASSWD, or (4) a long password to the POP3 server.

Exploit prediction (EPSS)

71.92% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-646 Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (3) · remote · 2004-12-22
  • EDB-643 Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (2) · remote · 2004-12-21
  • EDB-638 Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1) · remote · 2004-11-18
  • EDB-16399 Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (Metasploit) · remote · 2010-04-30

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • marc.info /?l=bugtraq&m=105232506011335&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • marc.info /?l=ntbugtraq&m=105233360321895&w=2 · mailing-list, x_refsource_NTBUGTRAQ, x_transferred
  • nextgenss.com /advisories/slmail-vulns.txt · x_refsource_MISC, x_transferred
  • packetstormsecurity.com /files/161526/SLMail-5.1.0.4420-Remote-Code-Execution.html · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.